ZeroDay Findings
Sign inSign up

Findings

CVE-2018-8589

Microsoft Win32k Privilege Escalation Vulnerability

Published Nov 13, 2018 · updated Jun 16, 2026 · microsoft windows 7

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 13, 2018 · Catalog

    Detected

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

  2. May 23, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 13, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Required action

Apply updates per vendor instructions.

CISA due date Jun 13, 2022

Affected

  • cpe microsoft/windows 7version unspecified
  • cpe microsoft/windows server 2008version unspecified
  • cpe microsoft/windows server 2008r2
  • vendor Microsoft Win32kversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2018-8589

    A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2018-8589

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2018-8589

    30-day exploitation probability 3.0%

    first.org
  • NIST NVDVulnerability recordCVE-2018-8589

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

    nvd.nist.gov

References

CVE-2018-8589 · ZeroDay Findings