Exploit for CVE-2018-8453

githubexploit · 2019-01-18

Description

本程序针对漏洞 2018 8453 的研究工具，利用 Palette 进行内核读写，测试平台为 Windows 10 x86/x64。

Affected software

Microsoft Windows 10 1507 All versions

Microsoft Windows 10 1607 All versions

Microsoft Windows 10 1703 All versions

Microsoft Windows 10 1709 All versions

All known vulnerabilities by product

Win32K Windows Windows 10 Windows 10 Servers Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008

CVSS 7.8 for CVE-2018-8453

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

86%confidence this exploit runs

Based on 29 file(s) in the source

EPSS Score

70.0%higher than 99.3% of all CVEs

Updated 2026-07-22

CVE Information

Exploit Details

Modified:2025-01-17 02:29

Last Seen:2025-09-01 00:02

Reporter:ze0r

Written in:C++

Last commit:2019-12-13

Tags

vulnerability 2018 8453palettekernel read writewindows tenplatform testing

Other exploits for CVE-2018-8453

Exploit for CVE-2018-8453

2020-05-02 jackGITEE

Microsoft Windows NtUserSetWindowFNID Win32k User Callback Exploit

2019-07-17 metasploitZDTRuby

Microsoft Windows - NtUserSetWindowFNID Win32k User Callback Privilege Escalation (Metasploit)

2019-07-17 MetasploitEXPLOITDBRuby

Microsoft Windows NtUserSetWindowFNID Win32k User Callback

2019-07-16 ze0rPACKETSTORMRuby

Windows NtUserSetWindowFNID Win32k User Callback

2019-07-09 ze0r, Kaspersky Lab, Jacob RoblesMETASPLOITRuby

Exploit for CVE-2018-8453

2019-07-08 thepwnripGITHUB

Immunity Canvas: SETWINDOWFNID_LPE

2018-10-10 Immunity CanvasCANVAS

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=AB46BAF5-2F94-59D7-A5BC-44DD62F27FF6
# cve-2018-8453-exp  
cve-2018-8453 exp  
This program is a utility for exploiting cve-2018-8453. Development/testing platform: x86: Windows 10 RS2 15063; x64: Windows 10 RS2 16299. Note: Palette is used for reading and writing the kernel.  
Severe notice: This tool is only intended for technical research and learning purposes. Any consequences arising from illegal use are entirely my responsibility.