CVE-2018-8120

EUVD-2018-19796 · Published May 9, 2018

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Technologies

Microsoft Windows 7Microsoft Windows Server 2008

Weaknesses

CWE-404

CVSS scores

v3.17.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation Impact

T1068Exploitation for Privilege Escalation T1498.001Direct Network Flood T1499Endpoint Denial of Service T1499.001OS Exhaustion Flood T1499.003Application Exhaustion Flood

References

https://www.exploit-db.com/exploits/45653/
http://www.securityfocus.com/bid/104034
http://www.securitytracker.com/id/1040849
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8120
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8120

Potentially impacted assets

See if this affects your attack surface