If successful, the attacker could obtain root-level privileges and access unauthorized data.

However, exploitation requires valid administrative credentials on the affected gadget.

On the other hand, Microsoft patched the CVE-2018-8639 vulnerability in December 2018 with a Microsoft Windows security update.

CISA

spot_img

source: www.techworm.net