CVE:CVE-2018-8134
CNNVD:CNNVD-201805-279
Microsoft Windows Server 2012 R2等都是美国微软（Microsoft）公司发布的操作系统。Kernel API是其中的一个内核API（应用程序接口）。
Microsoft Windows中的Kernel API强制执行权限的方式存在提权漏洞。本地攻击者可通过运行特制的应用程序利用该漏洞伪造进程，注入跨进程通信或中断系统功能。以下系统版本受到影响：Microsoft Windows Server 2012 R2，Windows RT 8.1，Windows Server 2016，Windows 8.1，Windows 10，Windows 10版本1607，Windows 10版本1703，Windows 10版本1709，Windows 10版本1803，Windows Server版本1709，Windows Server版本1803。
solution:Upgrade microsoft windows_10 to a higher version than -,1607,1703,1709,1803,and avoid the version 1607,1703,1709,1803; Upgrade microsoft windows_7 to a higher version than *:sp1,and avoid the version *:sp1; Upgrade microsoft windows_8.1 to a higher version than *; Upgrade microsoft windows_rt_8.1 to a higher version than *; Upgrade microsoft windows_server_2012 to a higher version than r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than *,1709,1803,and avoid the version 1709,1803