SB2018081430 - Multiple vulnerabilities in Microsoft Windows Kernel

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Information disclosure (CVE-ID: CVE-2018-8341)

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to improper handling of objects in memory by the Windows kernel. A local attacker can run a specially crafted application, trigger memory corruption and gain access to potentially sensitive information.

2) Information disclosure (CVE-ID: CVE-2018-8348)

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to improper handling of objects in memory by the Windows kernel. A local attacker can run a specially crafted application, trigger memory corruption and gain access to potentially sensitive information.

3) Privilege escalation (CVE-ID: CVE-2018-8347)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists Microsoft Windows due to an error when the Windows kernel fails to properly handle parsing of certain symbolic links. A local attacker can run a specially crafted application to potentially access privileged registry keys and thereby elevate permissions.

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8341
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8348
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8347