ZeroDay Findings
Sign inSign up

Findings

CVE-2018-8120

Microsoft Win32k Privilege Escalation Vulnerability

Published May 9, 2018 · updated Aug 12, 2026 · microsoft windows 7

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Timeline

Detection, updates, and resolution for this record.

  1. May 9, 2018 · Catalog

    Detected

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

  2. Mar 15, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 5, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 12, 2026 · Catalog

    Updated

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Required action

Apply updates per vendor instructions.

CISA due date Apr 5, 2022

Affected

  • cpe microsoft/windows 7version unspecified
  • cpe microsoft/windows server 2008version unspecified
  • cpe microsoft/windows server 2008r2
  • vendor Microsoft Win32kversion unspecified

Sources

  • CISA KEVCVE-2018-8120

    A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

    cisa.gov
  • CVE.orgCVE-2018-8120

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2018-8120

    30-day exploitation probability 73.4%

    first.org
  • Exploit Database45653

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_windows/local/ms18_8120_win32k_privesc

    Public module reference (good). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2018-8120

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2

    nvd.nist.gov

References