Windows Image Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows kernel image properly handles objects in memory.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A

Microsoft Windows kernel image 权限许可和访问控制问题漏洞

Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。 Microsoft Windows kernel image中处理内存对象的方法存在提权漏洞。本地攻击者可通过运行特制的应用程序利用该漏洞以提升权限执行代码。以下产品及版本受到影响：Microsoft Windows 10版本1809，Wind

N/A

N/A