Zero-day in Windows Kernel Transaction Manager (CVE-2018-8611)

🗓️ 12 Dec 2018 08:00:24Reported by Boris LarinType

Zero-day vulnerability in Windows Kernel Transaction Manager (CVE-2018-8611) successfully bypasses modern process mitigations to lead to Remote Command Execution in web browsers. Discovered by Kaspersky Lab, exploits used by multiple threat actors

Reporter	Title	Published	Views	Family All 179
zdt	Microsoft Windows NtUserSetWindowFNID Win32k User Callback Exploit	17 Jul 201900:00	–	zdt
githubexploit	Exploit for CVE-2018-8453	18 Jan 201910:40	–	githubexploit
githubexploit	Exploit for CVE-2018-8453	8 Jul 201913:06	–	githubexploit
attackerkb	CVE-2018-8611	12 Dec 201800:00	–	attackerkb
attackerkb	CVE-2018-8453	10 Oct 201800:00	–	attackerkb
attackerkb	CVE-2018-8589	14 Nov 201800:00	–	attackerkb
attackerkb	CVE-2018-8453	10 Oct 201800:00	–	attackerkb
bdu_fstec	The vulnerability of the Win32k component in Windows operating systems allows attackers to enhance their privileges and execute arbitrary code.	19 Oct 201800:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges and execute arbitrary code.	13 Dec 201800:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Win32k component in Windows operating systems allows attackers to enhance their privileges and execute arbitrary code.	31 Jan 201900:00	–	bdu_fstec