Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

2Igosha

Pesquisador deKaspersky Lab
#32551de 53,639
7.8CVSS total
Vulnerabilidades · 1
PT-2018-2287
7.8
2018-11-13
Microsoft · Windows 7 · CVE-2018-8589
**Name of the Vulnerable Software and Affected Versions** Windows Server 2008 Windows 7 Windows Server 2008 R2 **Description** The issue is caused by a buffer overflow in the memory of the Win32k component (Win32k.sys) in Windows operating systems. This can allow an attacker to execute arbitrary code using a specially crafted application. The vulnerability exists due to Windows improperly handling calls to Win32k.sys, which can lead to an elevation of privilege. **Recommendations** For Windows Server 2008, Windows 7, and Windows Server 2008 R2, apply the necessary patches or updates to fix the Win32k.sys component. As a temporary workaround, consider restricting access to the Win32k.sys component until a patch is available. Avoid using the affected Windows systems for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.