CVE-2018-8897

CVE-2018-8897 is a critical vulnerability stemming from a misinterpretation of Intel's System Programming Guide by various operating system kernels, including Windows, macOS, Xen, and FreeBSD. This flaw allows for unexpected behavior with #DB exceptions deferred by MOV SS or POP SS instructions, potentially leading to privilege escalation or kernel crashes. With a CVSS score of 7.8 (HIGH), the vulnerability is locally exploitable with low attack complexity, enabling an attacker to gain full control over the affected system. While not actively exploited in the wild (KEV), public exploit code exists, including Metasploit modules and ExploitDB entries, and it has garnered significant community discussion and media coverage.