PT-2018-1661 · Microsoft · Windows 10 Servers +12

🗓️ 17 Aug 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Win32k memory flaw enables privilege escalation and code execution; used by Sodinokibi ransomware.

Reporter	Title	Published	Views	Family All 80
0day.today	Microsoft Windows NtUserSetWindowFNID Win32k User Callback Exploit	17 Jul 201900:00	–	zdt
GithubExploit	Exploit for CVE-2018-8453	18 Jan 201910:40	–	githubexploit
GithubExploit	Exploit for CVE-2018-8453	8 Jul 201913:06	–	githubexploit
ATTACKERKB	CVE-2018-8453	10 Oct 201800:00	–	attackerkb
ATTACKERKB	CVE-2018-8453	10 Oct 201800:00	–	attackerkb
Gitee	Exploit for CVE-2018-8453	2 May 202014:33	–	gitee
Circl	CVE-2018-8453	10 Oct 201804:00	–	circl
CISA KEV Catalog	Microsoft Win32k Privilege Escalation Vulnerability	21 Jan 202200:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	21 Jan 202200:00	–	cisa
CNVD	Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2018-21215)	10 Oct 201800:00	–	cnvd

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2018_8453_win32k_priv_esc.rb
github	www.github.com/ze0r/cve-2018-8453-exp
github	www.github.com/thepwnrip/leHACK-Analysis-of-CVE-2018-8453
exploit-db	www.exploit-db.com/exploits/47134
securelist	www.securelist.com/cve-2018-8453-used-in-targeted-attack
packetstormsecurity	www.packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html
bdu	www.bdu.fstec.ru/vul/2018-01220
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8453
msrc	www.msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8453

07 Apr 2025 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 27.2

CVSS 3.17.8

EPSS0.81325

Windows kernel component Memory handling flaw Privilege escalation Code execution Sodinokibi ransomware