Veille CVE
CVE-2018-8589
7.8 Élevée Exploitée activementCatalogue CISA KEV — Microsoft Win32k Privilege Escalation Vulnerability
Ajoutée le 23/05/2022 · Échéance de correction (agences US) : 13/06/2022
Action requise : Apply updates per vendor instructions.
Description
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.2 Élevée | nvd@nist.gov (NVD) | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Références
- http://www.securityfocus.com/bid/105796 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1042140 Broken LinkThird Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589 PatchVendor Advisory
- http://www.securityfocus.com/bid/105796 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1042140 Broken LinkThird Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589 PatchVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589 US Government Resource