Description of the security update for the elevation of privilege vulnerabilities in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: December 11, 2018

🗓️ 11 Dec 2018 00:00:00Reported by MicrosoftType

Security update for elevation of privilege vulnerabilities in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009, December 11, 2018. Addresses Win32k.sys, objects in memory, and kernel mode driver handling vulnerabilities. Available through Windows Update or Microsoft Update Catalog. File hash and version details provided.

Reporter	Title	Published	Views	Family All 109
ATTACKERKB	CVE-2018-8589	14 Nov 201800:00	–	attackerkb
ATTACKERKB	CVE-2018-8639	12 Dec 201800:00	–	attackerkb
ATTACKERKB	CVE-2018-8641	12 Dec 201800:29	–	attackerkb
BDU FSTEC	The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in kernel mode.	28 Dec 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in kernel mode.	28 Dec 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Win32k component in Windows operating systems allows attackers to enhance their privileges and execute arbitrary code.	31 Jan 201900:00	–	bdu_fstec
Circl	CVE-2018-8589	14 Nov 201804:00	–	circl
Circl	CVE-2018-8639	3 Mar 202515:58	–	circl
Circl	CVE-2018-8641	9 Oct 202013:20	–	circl
CISA KEV Catalog	Microsoft Win32k Privilege Escalation Vulnerability	23 May 202200:00	–	cisa_kev