Vulnerabilitycritical

APT group used CVE-2018-8589 Zero

Security Affairsby @securityaffairsNov 14, 2018 · 16:50 UTC (Nov 14, 2018)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2018-8589 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-8589 CVE-2018-8453

Tags: cve-2018-8589 cve-2018-8453 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-8453	Win32k Elevation of Privilege Flaw in Windows 7-10 and Windows Server (CVE-2018-8453)	7.8	70%	KEVRansomwarePoC ×2	Oct 10, 2018 KEV Jan 21, 2022
CVE-2018-8589	Local Privilege Escalation in Microsoft Windows Win32k (Windows 7 / Server 2008)	7.8	3%	KEV	Nov 14, 2018 KEV May 23, 2022

From the original article

2 min read at securityaffairs.com

Kaspersky revealed that the CVE-2018-8589 Windows 0-day fixed by Microsoft Nov. 2018 Patch Tuesday has been exploited by at least one APT group in attacks in the Middle East. Kaspersky Lab experts revealed that the CVE-2018-8589 Windows zero-day vulnerability addressed by Microsoft November 2018 Patch Tuesday has been exploited by an APT group in targeted attacks against entities in the Middle East.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.