CVE-2018-8589

State: Published
Severity: 7.8 High
Published: Nov 14, 2018
Updated: Oct 21, 2025
Reserved: Mar 14, 2018

Description

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Windows Server 2008Microsoft	32-bit Systems Service Pack 2Affected 32-bit Systems Service Pack 2 (Server Core installation)Affected Itanium-Based Systems Service Pack 2Affected x64-based Systems Service Pack 2Affected x64-based Systems Service Pack 2 (Server Core installation)Affected
Windows 7Microsoft	32-bit Systems Service Pack 1Affected x64-based Systems Service Pack 1Affected
Windows Server 2008 R2Microsoft	Itanium-Based Systems Service Pack 1Affected x64-based Systems Service Pack 1Affected x64-based Systems Service Pack 1 (Server Core installation)Affected

References

105796vdb-entry
1042140vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.