CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
CVE-2018-0982 | Windows Elevation of Privilege Vulnerability | Windows Server 2016 | Important | 13-06-2018 |
Technical Information
Brief overview of the risk:
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploited the vulnerability could impersonate processes interject cross-process communication or interrupt system functionality.
Detailed Information on the risk:
To exploit the vulnerability a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly enforces permissions
Further information on this exploit is available at : CVE-2018-0982
Affected Software
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows Server version 1709 (Server Core Installation)
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server version 1803 (Server Core Installation)