CVE-2018-8589
Microsoft Windows Server 2008 r2
Raw vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSummary
CVE-2018-8589 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 14% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
An elevation of privilege vulnerability exists in Windows when the operating system improperly handles calls to the Win32k.sys kernel-mode driver. The issue, tracked as CVE-2018-8589, affects Windows 7, Windows Server 2008, and Windows Server 2008 R2. It received a CVSS v3.1 base score of 7.8, reflecting local attack vector, low attack complexity, and low privileges required.
A local attacker with a low-privileged account can exploit the flaw to elevate privileges on an affected system, resulting in full control over confidentiality, integrity, and availability of the target. No user interaction is required for successful exploitation.
Microsoft has published an advisory for CVE-2018-8589 at the listed portal URL, along with related tracking entries on SecurityFocus and SecurityTracker. No information on real-world exploitation or additional context is provided in the supplied references.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2018-20204
Vulnerability Data
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
- CWE(s)
- KEV Date Added
- 23 May 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.