CVE-2018-8440

CVE-2018-8440 is an elevation of privilege vulnerability in Windows that arises from improper handling of Advanced Local Procedure Call (ALPC) calls, affecting numerous Windows versions including Windows 7, 8.1, 10, and various Server editions. This vulnerability carries a high CVSS score of 7.8, indicating a local attack vector with low complexity, allowing an attacker to gain full control over the compromised system. It has been actively exploited in the wild, including in known ransomware campaigns, and exploit modules are publicly available, as evidenced by a Metasploit module and significant community discussion.