CVE-2018-8589

CVE Published 2018-11-14
Related Vendor(s) microsoft
Related Product(s) windows_7, windows_server_2008
Exploitation Reported (CISA KEV) 2022-05-23
CVSS 3 Base Score 7.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References