High severity7.0CISA KEVNVD Advisory· Published May 9, 2018· Updated Jun 17, 2026

CVE-2018-8120

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windowsllm-fuzzy
Microsoft/Windows 7cpe-rescue
Range: 32-bit Systems Service Pack 1
Microsoft/Windows Server 2008cpe-rescue2 versions
32-bit Systems Service Pack 2+ 1 more
- (no CPE)range: 32-bit Systems Service Pack 2
- (no CPE)range: Itanium-Based Systems Service Pack 1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8120nvdPatchVendor Advisory
www.exploit-db.com/exploits/45653/nvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/104034nvdBroken LinkThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040849nvdBroken LinkThird Party AdvisoryVDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.059
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.060