Microsoft Windows Win32k Privilege Escalation Vulnerability



A vulnerability in the Microsoft Windows Win32k kernel-mode driver could allow a local attacker to escalate privileges on a targeted system.

The vulnerability is due to improper memory operations that are performed by the affected software. An attacker could exploit this vulnerability by accessing the system and executing an application that submits malicious input to the affected software. A successful exploit could allow the attacker to execute arbitrary code in kernel mode and compromise the system completely.

Microsoft confirmed the vulnerability and released software updates.

Security Impact Rating: High

CVE: CVE-2018-8453

Source:: Cisco Multivendor Vulnerability Alerts