Skip to content
OpenAdvisories
High · 7.8 Known exploited CVE-2018-8589 EUVD-2018-20204GHSA-67qx-v8w9-q5x5

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privil…

Published Nov 14, 2018 · Updated Oct 21, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Windows 7 Product: Windows Server 2008 Product: Windows Server 2008 R2 Platform: Windows

Description

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Affected products

VendorProductAffectedFixed
Microsoft Windows Server 2008 32-bit Systems Service Pack 2, 32-bit Systems Service Pack 2 (Server Core installation), Itanium-Based Systems Service Pack 2, x64-based Systems Service Pack 2, x64-based Systems Service Pack 2 (Server Core installation) —
Microsoft Windows 7 32-bit Systems Service Pack 1, x64-based Systems Service Pack 1 —
Microsoft Windows Server 2008 R2 Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation) —

References