CVE-2018-8453
Windows 7 · elevation of privilege
cve-program · severity unknownCVSS unknownCheck source for fixed versionsCISA KEV
cve-program · CVE-2018-8453
PublishedAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2018-8453 · CVE overview and exploitation status
cve-program · CVE-2018-8453
- http://www.securitytracker.com/id/1041828
- https://securelist.com/cve-2018-8453-used-in-targeted-attack
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453
- http://www.securityfocus.com/bid/105467
- http://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html
Related changes
Linked by CVE identifier- Microsoft Win32k Privilege Escalation Vulnerability · CISA KEV deadline · 21 Jul 2022
- Microsoft Win32k Privilege Escalation Vulnerability · Added to CISA KEV · 21 Jan 2022