CVE-2018-8589

Windows Server 2008 · elevation of privilege

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2018-8589

Published

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2018-8589

Published

Windows Server 2008

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "product": "Windows Server 2008",
                    "vendor": "Microsoft",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "32-bit Systems Service Pack 2"
                        },
                        {
                            "status": "affected",
                            "version": "32-bit Systems Service Pack 2 (Server Core installation)"
                        },
                        {
                            "status": "affected",
                            "version": "Itanium-Based Systems Service Pack 2"
                        },
                        {
                            "status": "affected",
                            "version": "x64-based Systems Service Pack 2"
                        },
                        {
                            "status": "affected",
                            "version": "x64-based Systems Service Pack 2 (Server Core installation)"
                        }
                    ]
                }

Windows 7

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "product": "Windows 7",
                    "vendor": "Microsoft",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "32-bit Systems Service Pack 1"
                        },
                        {
                            "status": "affected",
                            "version": "x64-based Systems Service Pack 1"
                        }
                    ]
                }

Windows Server 2008 R2

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "product": "Windows Server 2008 R2",
                    "vendor": "Microsoft",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "Itanium-Based Systems Service Pack 1"
                        },
                        {
                            "status": "affected",
                            "version": "x64-based Systems Service Pack 1"
                        },
                        {
                            "status": "affected",
                            "version": "x64-based Systems Service Pack 1 (Server Core installation)"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON