Vulnerabilitycritical

CVE-2018-8453 exploited by FruityArmor APT in attacks aimed at Middle East

Security Affairsby @securityaffairsOct 10, 2018 · 13:45 UTC (Oct 10, 2018)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2018-8453 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-8453 CVE-2017-0263

Tags: cve-2018-8453 cve-2017-0263 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-0263	Win32k Use-After-Free Local Privilege Escalation in Windows 7 through Server 2016	7.8	10%	KEVPoC ×2	May 12, 2017 KEV Feb 10, 2022
CVE-2018-8453	Win32k Elevation of Privilege Flaw in Windows 7-10 and Windows Server (CVE-2018-8453)	7.8	70%	KEVRansomwarePoC ×2	Oct 10, 2018 KEV Jan 21, 2022

From the original article

2 min read at securityaffairs.com

A Windows zero-day flaw addressed by Microsoft with its latest Patch Tuesday updates is exploited by an APT group in attacks aimed at entities in the Middle East. The Windows zero-day vulnerability tracked as CVE-2018-8453 is a privilege escalation flaw that was exploited by an APT group in attacks against entities in the Middle East.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.