CVE-2018-8589: Microsoft Win32k Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
Other sources
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8589?
CVE-2018-8589 is rated as important in severity due to the potential for privilege escalation.
How do I fix CVE-2018-8589?
To fix CVE-2018-8589, you should apply the latest security updates provided by Microsoft for your affected Windows version.
Which versions of Windows are affected by CVE-2018-8589?
CVE-2018-8589 affects Windows Server 2008, Windows 7, and Windows Server 2008 R2.
What type of vulnerability is CVE-2018-8589?
CVE-2018-8589 is classified as an elevation of privilege vulnerability.
How can attackers exploit CVE-2018-8589?
Attackers can exploit CVE-2018-8589 by making improper calls to Win32k.sys, allowing them to gain elevated privileges.