CVE-2018-8120: Microsoft Windows Server 2008 vulnerability

1. In CISA KEVCISA KEV catalogue15 Mar 2022
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

• Microsoft · Windows Server 200832-bit Systems Service Pack 2; 32-bit Systems Service Pack 2 (Server Core installation); Itanium-Based Systems Service Pack 2; x64-based Systems Service Pack 2; x64-based Systems Service Pack 2 (Server Core installation)
• Microsoft · Windows 732-bit Systems Service Pack 1; x64-based Systems Service Pack 1
• Microsoft · Windows Server 2008 R2Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 15 Mar 2022 · known ransomware use · catalogue entry

Public check

No public nuclei template

Weakness

Improper Resource Shutdown or Release · Denial of Service

Vendor

Microsoft

Published

May 2018

Band

Exploited in the wild, May 2018

1. 5 Nov
   CISA’s KEV entry now notes known ransomware use CISA
2. 15 Mar 2022
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Weakness CWE-404cwe.mitre.org
• Exploitexploit-db.com
• securitytracker.com/id/1040849securitytracker.com
• securityfocus.com/bid/104034securityfocus.com
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com