PT-2018-1496 · Microsoft · Windows 10 Servers+2

Bee13Oy · Published 2018-08-14 · Updated 2022-05-23 · CVE-2018-8399

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 10 Servers Windows 10

Description The issue is related to the Win32k component's failure to properly handle objects in memory, which can lead to an elevation of privilege. This can potentially allow an attacker to execute arbitrary code in kernel mode using a specially crafted application.

Recommendations For Windows 10 Servers, apply the necessary patch to fix the Win32k component's handling of objects in memory. For Windows 10, apply the necessary patch to fix the Win32k component's handling of objects in memory.

Fix

LPE

Buffer Overflow

Improper Resource Release

Weakness Enumeration

CWE-119

CWE-404

Related Identifiers

BDU:2018-01047

CVE-2018-8399

Affected Products

Windows

Windows 10

Windows 10 Servers

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2018-8399 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8399 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8399 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01047 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8399 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-8399 · Vendor Advisory
• http://securitytracker.com/id/1041466 · Note
• http://securityfocus.com/bid/104998 · Note
• https://support.microsoft.com/help/4343885 · Note