CVE-2018-8589

High · 7.8 CISA KEV

CVSS

7.8

EPSS

3.0%

Published

Nov 14, 2018

CISA due date

Jun 13, 2022

The record

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Affected packages

Ecosystem	Package	Introduced	Fixed