NVD disclosure day

Published threat advisories for December 12, 2018

CVE advisoryKnown Exploit

CVE-2018-8639

Windows Elevation of Privilege Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Windows Win32k component allows for privilege escalation, enabling attackers with local access to gain higher-level permissions and potentially control affected systems. This flaw could expose sensitive data and disrupt operations.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2018-8611

Windows Kernel Privilege Escalation Vulnerability Advisory

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Windows kernel's memory handling can allow an attacker with local access to gain elevated privileges. This impacts multiple Windows operating systems and servers, posing a risk of unauthorized access and control. Organizations should identify affected systems and apply vendor updates.

NVD published: • CISA KEV