H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-03-03
Last seen2025-03-03

Confidence

—

Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productMicrosoft Windows
Added2025-03-03
Due date2025-03-24
8 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
related-toTechnique
related-toTechnique
related-toTechnique
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2018-8639
open
cwe
CWE-404
open