{"id":"CVE-2018-8611","kind":"vulnerability","aliases":["CVE-2018-8611"],"related":[],"title":"Microsoft Windows: Microsoft Windows Kernel Privilege Escalation Vulnerability","description":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.","summary":"A flaw in the Windows kernel lets a process mishandle objects in memory, letting a local user raise their privileges. Attackers who already have code running on the machine can gain SYSTEM rights.","severity":"high","cvss":7.8,"epss":0.04196,"exploited":true,"exploited_at":"2022-05-24T00:00:00+00:00","products":[{"name":"Microsoft Windows","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","self-hosted","windows"],"not_affected_if":["patched-windows"],"how_to_check":null,"fix":"Apply the Microsoft update for CVE-2018-8611 per vendor instructions, as CISA required; the specific KB number is not in the sources.","status":"open","published_at":"2018-12-12T00:29:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:15:49+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:15:49Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft update for CVE-2018-8611 per vendor instructions, as CISA required; the specific KB number is not in the sources.","reach":"local","impact":"high","summary":"A flaw in the Windows kernel lets a process mishandle objects in memory, letting a local user raise their privileges. Attackers who already have code running on the machine can gain SYSTEM rights.","category":"infrastructure","who_cares":["windows","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"local attacker gains SYSTEM privileges on the Windows machine","analyst_note":"Find the Microsoft security update KB and affected Windows builds at the MSRC entry for CVE-2018-8611 to fill in how_to_check and fix.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-windows"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000452,"input_tokens":2817,"output_tokens":340,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2018':10A,13A '-8611':11A,14A '10':110C,112C '2008':93C,107C '2012':86C,99C '2016':104C '2019':96C '7':83C '8.1':90C,101C 'affect':81C 'aka':73C 'alreadi':45B 'attack':43B 'code':47B 'cve':9A,12A 'elev':57C,76C 'escal':7A 'exist':61C 'exploit':17B 'fail':66C 'flaw':24B 'gain':53B 'handl':69C 'host':21B 'infrastructur':18B 'kernel':5A,28B,65C,75C 'let':29B,36B 'local':38B 'machin':51B 'memori':35B,72C 'microsoft':1A,3A,15A 'mishandl':32B 'object':33B,70C 'privileg':6A,42B,59C,78C 'process':31B 'proper':68C 'r2':87C,108C 'rais':40B 'right':55B 'rt':89C 'run':48B 'self':20B 'self-host':19B 'server':85C,92C,95C,98C,103C,106C,113C 'system':54B 'user':39B 'vulner':8A,60C,79C 'window':2A,4A,22B,27B,64C,74C,82C,84C,88C,91C,94C,97C,100C,102C,105C,109C,111C 'windows':16A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2018-12-12T00:29:00+00:00","kev":{"dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2018-8611","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8611","severity":null,"published_at":"2022-05-24T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T19:35:24+00:00","note":null},{"source":"epss","external_id":"CVE-2018-8611","url":"https://api.first.org/data/v1/epss?cve=CVE-2018-8611","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2018-8611","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8611","severity":null,"published_at":"2018-12-12T00:29:00+00:00","modified_at":"2026-06-17T02:05:11+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}