CERT/CC Details Critical Flaws in Microsoft Windows, Server

[LASER_oneXM]

Content source

https://www.darkreading.com/vulnerabilities---threats/cert-cc-details-critical-flaws-in-microsoft-windows-server-/d/d-id/1333590

The vulnerabilities could be remotely exploited and give attackers control over affected systems.

The CERT Coordination Center (CERT/CC) today published data on vulnerabilities affecting versions of Microsoft Windows and Windows Server.

Microsoft had issued an advisory for CVE-2018-8611, a Windows kernel elevation of privilege bug that exists when the Windows kernel fails to properly handle objects in memory. An attacker who exploited this flaw could run arbitrary code in kernel mode. They could then install programs and view, change, or delete data, or create new accounts with full user rights.

 

[upnorth]

Kaspersky experts state that "the exploit can also be used to escape the sandbox in modern Web browsers, including Chrome and Edge."

CERT Coordination Center