CVSS: 7.8EPSS: 95%CPEs: 17EXPL: 4CVE-2018-8453 – Microsoft Win32k Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2018-8453
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Existe una vulnerabilidad de elevación de privilegios en Windows cuando el componente Win32k no gestiona adecuadamente los objetos en la memoria. Esto también se conoce como "Win32k Elevation of Privilege Vulnerability". Esto afecta a Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 y Windows 10 Servers. • https://www.exploit-db.com/exploits/47134 https://github.com/thepwnrip/leHACK-Analysis-of-CVE-2018-8453 http://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html http://www.securityfocus.com/bid/105467 http://www.securitytracker.com/id/1041828 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453 https://securelist.com/cve-2018-8453-used-in-targeted-attack https://github.com/ze0r/cve-2018-8453-exp https://mp.weixin& •
CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0CVE-2018-0844
https://notcve.org/view.php?id=CVE-2018-0844
The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0846. El controlador Windows Common Log File System (CLFS) en Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server, versión 1709 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que se gestionan los objetos en la memoria. Esto también se conoce como "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". El ID de este CVE es diferente de CVE-2018-0846. • http://www.securityfocus.com/bid/102929 http://www.securitytracker.com/id/1040380 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0844 •
CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0CVE-2018-0846
https://notcve.org/view.php?id=CVE-2018-0846
The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0844. El controlador Windows Common Log File System (CLFS) en Windows 7 SP1, Windows 8.1 y RT 8.1, Windows Server 2008 SP2 y R2 SP1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y 1709, Windows Server 2016 y Windows Server, versión 1709 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que se gestionan los objetos en la memoria. Esto también se conoce como "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". El ID de este CVE es diferente de CVE-2018-0844. • http://www.securityfocus.com/bid/102931 http://www.securitytracker.com/id/1040380 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0846 •