7.8

CVE-2018-8453: Microsoft Win32k Privilege Escalation Vulnerability

CVSS: 7.8v3.1HighKEVRansomwareAnalyzed
Published 10-10-2018Last modified 13-08-2026
Open JSON

Vulnerability summary

CVE-2018-8453 is a high (CVSS 7.8) vulnerability in Microsoft Win32k. It is known to be exploited: CISA lists it, first on 21-01-2022. It has been used in ransomware campaigns. EPSS estimates a 70.04% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
70.04%
0%100%
Critical · 0.00 pp in 30 days
KEVListedCISA
RansomwareKnown useFlagged by CISA
Public exploits4reference, exploit-database, metasploit

Timeline

  1. 10-10-2018
    PublishedVulnerability first disclosed.
  2. 21-01-2022
    Added to CISA KEVMicrosoft Win32k Privilege Escalation Vulnerability
  3. 21-07-2022
    CISA remediation dueApply updates per vendor instructions.
  4. 13-08-2026
    Last modifiedVulnerability information updated.

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

70.04%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 70.04% on 19-09-2026

19-09-202619-10-2026
EPSS score
70.04%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
21-01-2022
Federal due date
21-07-2022
Ransomware

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2018-8453

Public exploits

4 found
  • referenceUnverified

    Exploit Reference (securelist.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (packetstormsecurity.com)

    Maturity: unknown

  • exploit-databaselocalwindowsVerified

    Microsoft Windows - NtUserSetWindowFNID Win32k User Callback Privilege Escalation (Metasploit)

    Maturity: weaponized

Show all 4 exploits
  • MetasploitMetasploitremoteUnverified

    Windows NtUserSetWindowFNID Win32k User Callback

    exploit/windows/local/cve_2018_8453_win32k_priv_esc

    Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Microsoft19 products
  • windows_1032-bit Systems | Version 1607 for 32-bit Systems | Version 1607 for x64-based Systems | Version 1703 for 32-bit Systems | Version 1703 for x64-based Systems | Version 1709 for 32-bit Systems | Version 1709 for x64-based Systems | Version 1803 for 32-bit Systems | Version 1803 for x64-based Systems | Version 1809 for 32-bit Systems | Version 1809 for x64-based Systems | x64-based Systems
  • windows_10_1507na
  • windows_10_1607na
  • windows_10_1703na
  • windows_10_1709na

1 vendor · 19 products

References

6 links