CVE-2018-8611

Warnung

EPSS 4.2%
Veröffentlicht 12.12.2018 00:29:00
Zuletzt bearbeitet 29.10.2025 14:46:37
Erkennungen
Login

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 6

NVD 15 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 10 1607 Version -

Microsoft ≫ Windows 10 1703 Version -

Microsoft ≫ Windows 10 1709 Version -

Microsoft ≫ Windows 10 1803 Version -

Microsoft ≫ Windows 10 1809 Version -

Microsoft ≫ Windows 7 Version - Update sp1

Microsoft ≫ Windows 8.1 Version - SwEdition pro_n

Microsoft ≫ Windows Rt 8.1 Version -

Microsoft ≫ Windows Server 2008 Version - Update sp2

Microsoft ≫ Windows Server 2008 Version r2 HwPlatform itanium

Microsoft ≫ Windows Server 2008 Version r2 HwPlatform x64

Microsoft ≫ Windows Server 2012 Version -

Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ Windows Server 2016 Version -

Microsoft ≫ Windows Server 2019 Version -

24.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Kernel Privilege Escalation Vulnerability

Schwachstelle

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.2%	0.898

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
CISA-ADP	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H