CVE-2018-8589

7.8 highKEVEPSS 3.0%

High (7.8) in Microsoft Win32k. In CISA KEV since 2022-05-23. EPSS 3.0% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2022-05-23, due 2022-06-13
Published: 2018-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_7
microsoft:windows_server_2008

References

http://www.securityfocus.com/bid/105796
http://www.securitytracker.com/id/1042140
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589
http://www.securityfocus.com/bid/105796
http://www.securitytracker.com/id/1042140

Check your stack JSON