ms12-018

MS12-018 is a Microsoft security bulletin addressing a vulnerability in Windows kernel-mode drivers that could allow elevation of privilege. The issue affects supported editions of Windows and requires an attacker to have valid logon credentials and local access to the system. Exploitation involves running a specially crafted application that continues execution after the attacker logs off. The update resolves the vulnerability by correcting how kernel-mode drivers handle objects in memory. This bulletin was released on March 13, 2012, and is rated Important. Users are advised to apply the update to prevent potential privilege escalation attacks.