PT-2018-1496 · Microsoft · Windows 10 Servers+2

Bee13Oy · Publicado 2018-08-14 · Atualizado 2022-05-23 · CVE-2018-8399

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 10 Servers Windows 10

Description The issue is related to the Win32k component's failure to properly handle objects in memory, which can lead to an elevation of privilege. This can potentially allow an attacker to execute arbitrary code in kernel mode using a specially crafted application.

Recommendations For Windows 10 Servers, apply the necessary patch to fix the Win32k component's handling of objects in memory. For Windows 10, apply the necessary patch to fix the Win32k component's handling of objects in memory.

Correção

LPE

Buffer Overflow

Improper Resource Release

Enumeração de Fraquezas

CWE-119

CWE-404

Identificadores relacionados

BDU:2018-01047

CVE-2018-8399

Produtos afetados

Windows

Windows 10

Windows 10 Servers

Referências · 9

• http://securitytracker.com/id/1041466 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-8399 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8399 · Nota de Segurança
• http://securityfocus.com/bid/104998 · Nota
• https://support.microsoft.com/help/4343885 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8399 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01047 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8399 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-8399 · Aviso do Fabricante