CVE-2018-8589
high · 7.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-05-23Remediation due 2022-06-13
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
7.8
CVSS
3.0%
EPSS (exploit prob.)
87th
EPSS percentile
2018-11-14
Published
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_7 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | r2 |
| microsoft | windows_server_2008 | r2 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/105796
- http://www.securitytracker.com/id/1042140
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589
- http://www.securityfocus.com/bid/105796
- http://www.securitytracker.com/id/1042140
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-8589