Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.

CVE-2018-8639 is a high-severity elevation of privilege vulnerability affecting multiple versions of Microsoft Windows, including Windows 7 (both 32-bit and x64-based Systems Service Pack 1), Windows Server editions from 2008 through 2019, Windows 8.1, Windows RT 8.1, and Windows 10. The vulnerability resides in the Win32k component, a core part of the Windows graphical subsystem responsible for handling windowing and graphical objects. Specifically, the flaw arises because Win32k improperly handles objects in memory, which can be exploited by an attacker to elevate their privileges on the affected system. The vulnerability is identified as CWE-404 (Improper Resource Shutdown or Release), indicating that the issue stems from incorrect management of memory or system objects. The CVSS v3.1 base score is 8.4, reflecting a high severity level. The vector string (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates that the attack requires local access (AV:L), has low attack complexity (AC:L), does not require privileges (PR:N) or user interaction (UI:N), and impacts confidentiality, integrity, and availability to a high degree (C:H/I:H/A:H). Although no known exploits are reported in the wild, the vulnerability's characteristics make it a significant risk if leveraged by a local attacker. The absence of user interaction and privileges required means that any local user or malicious code running on the system could potentially exploit this flaw to gain SYSTEM-level privileges, thereby fully compromising the affected machine. Given the broad range of affected Windows versions, including widely used Windows 7 and Windows Server platforms, this vulnerability poses a substantial threat to environments that have not applied appropriate patches or mitigations. The lack of patch links in the provided data suggests that organizations must verify patch availability directly from Microsoft security advisories and ensure timely deployment to mitigate risk.

Detailed information about CVE-2018-8639: Elevation of Privilege in Microsoft Windows 7 affecting Microsoft Windows 7. Get real-time updates, technical details,

CVE-2018-8639: Elevation of Privilege in Microsoft Windows 7 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2018-8639: Elevation of Privilege in Microsoft Windows 7

Threats Tagged 'cve-2018-8639'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2018-8639'

Lead Pen Test Professional