CVE-2018-8410

HIGH

Microsoft Windows - Double Dereference in NtEnumerateKey Elevation of Privilege

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-8410 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

Affected products and versions

9
ProductSourceVersion range

Windows 10

Browse Microsoft / Windows 10
CVE List32-bit Systemsaffected
Version 1607 for 32-bit Systemsaffected
Version 1607 for x64-based Systemsaffected
Version 1703 for 32-bit Systemsaffected
Version 1703 for x64-based Systemsaffected
Version 1709 for 32-bit Systemsaffected
Version 1709 for x64-based Systemsaffected
Version 1803 for 32-bit Systemsaffected
Version 1803 for x64-based Systemsaffected
x64-based Systemsaffected

Windows 10 Servers

Browse Microsoft / Windows 10 Servers
CVE Listversion 1803 (Server Core Installation)affected

Windows 7

Browse Microsoft / Windows 7
CVE List32-bit Systems Service Pack 1affected
x64-based Systems Service Pack 1affected

Windows 8.1

Browse Microsoft / Windows 8.1
CVE List32-bit systemsaffected
x64-based systemsaffected

Windows RT 8.1

Browse Microsoft / Windows RT 8.1
CVE ListWindows RT 8.1affected

Windows Server 2008 R2

Browse Microsoft / Windows Server 2008 R2
CVE ListItanium-Based Systems Service Pack 1affected
x64-based Systems Service Pack 1affected
x64-based Systems Service Pack 1 (Server Core installation)affected

Windows Server 2012

Browse Microsoft / Windows Server 2012
CVE List(Server Core installation)affected

Windows Server 2012 R2

Browse Microsoft / Windows Server 2012 R2
CVE List(Server Core installation)affected

Windows Server 2016

Browse Microsoft / Windows Server 2016
CVE List(Server Core installation)affected

Proofs of concept

2

Catalogued exploits

ExploitDBMicrosoft Windows - Double Dereference in NtEnumerateKey Elevation of PrivilegeExploitDB exploitby Google Security ResearchNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubtrapmine/CVE-2018-8410Repository PoCby trapmine1Not analyzed2 files

1.8 KiB

GitHub
PoC details

References

5