CVE-2018-8453 : An elevation of privilege vulnerability exists in Windows when the Win32k compon

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Published 2018-10-10 13:29:03

Updated 2024-07-24 16:47:11

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Gain privilege

Products affected by CVE-2018-8453

Microsoft » Windows Server 2008 » Version: R2 Update SP1
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: N/A Update SP2
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Windows 7 » Version: N/A Update SP1
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2012 » Version: N/A
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2012 » Version: R2
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 8.1 » Version: N/A
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Rt 8.1 » Version: N/A
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2016 » Version: N/A
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 1709 » Version: N/A
cpe:2.3:o:microsoft:windows_server_1709:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 1803 » Version: N/A
cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2019 » Version: N/A
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1607 » Version: N/A
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1809 » Version: N/A
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1507 » Version: N/A
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1703 » Version: N/A
cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1709 » Version: N/A
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1803 » Version: N/A
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*
Matching versions

CVE-2018-8453 is in the CISA Known Exploited Vulnerabilities Catalog

This issue is known to have been leveraged as part of a ransomware campaign.

CISA vulnerability name:

Microsoft Win32k Privilege Escalation Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2018-8453

Added on 2022-01-21 Action due date 2022-07-21

Exploit prediction scoring system (EPSS) score for CVE-2018-8453

EPSS FAQ

94.75%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2018-8453

Windows NtUserSetWindowFNID Win32k User Callback

Disclosure Date: 2018-10-09

First seen: 2020-04-26

exploit/windows/local/cve_2018_8453_win32k_priv_esc

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windo

More information

CVSS scores for CVE-2018-8453

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	NIST	2024-07-24
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2018-8453

http://www.securitytracker.com/id/1041828

Windows Kernel Lets Local Users Gain Elevated Privileges - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securityfocus.com/bid/105467

Microsoft Windows Kernel 'Win32k.sys' CVE-2018-8453 Local Privilege Escalation Vulnerability
Broken Link;Third Party Advisory;VDB Entry
http://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html

Microsoft Windows NtUserSetWindowFNID Win32k User Callback ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry
https://securelist.com/cve-2018-8453-used-in-targeted-attack

Zero-day exploit (CVE-2018-8453) used in targeted attacks | Securelist
Exploit;Technical Description;Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453

CVE-2018-8453 | Win32k Elevation of Privilege Vulnerability
Patch;Vendor Advisory

Jump to