PT-2018-1796

CVE-2018-8562

·

Publicado

2018-11-13

·

Atualizado

2019-10-03

Descrição por

CVSS 3.1
7.8
Alta
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers
Description The issue is related to an elevation of privilege vulnerability in the Win32k component of Windows, which fails to properly handle objects in memory. This can allow an attacker to elevate their privileges and potentially execute arbitrary code in kernel mode using a specially crafted application. The vulnerability can be exploited to affect the system.
Recommendations For Windows 7, consider applying security updates or patches to address the issue. For Windows Server 2012 R2, apply the latest security updates to resolve the vulnerability. For Windows RT 8.1, install the latest available patches to fix the issue. For Windows Server 2008, update to the latest service pack and apply security patches. For Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers, apply the latest security updates or patches to address the vulnerability. As a temporary workaround, consider restricting access to the Win32k component until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾