Exploit / PoCcritical
Zero-day exploit (CVE-2018-8453) used in targeted attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0263 | Win32k Use-After-Free Local Privilege Escalation in Windows 7 through Server 2016 | 7.8 | 10% | KEVPoC ×2 | KEV |
| CVE-2018-8453 | Win32k Elevation of Privilege Flaw in Windows 7-10 and Windows Server (CVE-2018-8453) | 7.8 | 70% | KEVRansomwarePoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | shelves-design.com | I – Indicators of compromise: Domains: weekendstrips[.]net shelves-design[.]com |
| domain | weekendstrips.net | the radar. Appendix I – Indicators of compromise: Domains: weekendstrips[.]net shelves-design[.]com |
From the original article
5 min read at securelist.com
Yesterday, Microsoft published their security bulletin, which patches CVE-2018-8453 , among others. It is a vulnerability in win32k. sys discovered by Kaspersky Lab in August.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.