CVEvulnerability
CVE-2018-8589
CISA Known Exploited Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability — Microsoft Win32k
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
- Added to KEV
- 2022-05-23
- Remediation due
- 2022-06-13
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2018-8589
- Status
- Analyzed
- Published
- 2018-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
Affected configurations
• microsoft windows 7
• microsoft windows server 2008
• microsoft windows server 2008 r2
References
- http://www.securityfocus.com/bid/105796 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042140 Broken Link, Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105796 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042140 Broken Link, Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589 Patch, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589 US Government Resource