CVE-2018-8120

State: Published
Severity: 7.0 High
Published: May 9, 2018
Updated: Aug 13, 2026
Reserved: Mar 14, 2018

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-404 Improper Resource Shutdown or Release

Affected Products

Product	Versions
Windows Server 2008Microsoft	32-bit Systems Service Pack 2Affected 32-bit Systems Service Pack 2 (Server Core installation)Affected Itanium-Based Systems Service Pack 2Affected x64-based Systems Service Pack 2Affected x64-based Systems Service Pack 2 (Server Core installation)Affected
Windows 7Microsoft	32-bit Systems Service Pack 1Affected x64-based Systems Service Pack 1Affected
Windows Server 2008 R2Microsoft	Itanium-Based Systems Service Pack 1Affected x64-based Systems Service Pack 1Affected x64-based Systems Service Pack 1 (Server Core installation)Affected

References

45653exploit
1040849vdb-entry
104034vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8120
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8120government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.