EXPOSURES › CVE-2018-8440
CVE-2018-8440
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows vulnerability allowed privilege escalation, actively exploited and linked to ransomware attacks, impacting DIB organizations using Windows systems.
CVE-2018-8440, a Windows ALPC handling flaw, enabled privilege escalation and is currently being exploited in the wild, often in conjunction with ransomware. DIB organizations must immediately patch affected systems to prevent unauthorized access and data compromise, directly impacting CMMC/NIST 800-171 compliance controls.
Shame score — The vulnerability's active exploitation by ransomware groups highlights a significant failure in Microsoft's security posture and a potential for widespread DIB compromise, despite the CVE's age.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |