cve-2018-8589
Vulnerability from cvelistv5
Published
2018-11-14 01:00
Modified
2025-02-07 16:38
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
References
secure@microsoft.comhttp://www.securityfocus.com/bid/105796Third Party Advisory, VDB Entry, Broken Link
secure@microsoft.comhttp://www.securitytracker.com/id/1042140Third Party Advisory, VDB Entry, Broken Link
secure@microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/105796Third Party Advisory, VDB Entry, Broken Link
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1042140Third Party Advisory, VDB Entry, Broken Link
af854a3a-2127-422b-91ae-364da2661108https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589Patch, Vendor Advisory
Impacted products
Vendor Product Version
Microsoft Windows Server 2008 Version: 32-bit Systems Service Pack 2
Version: 32-bit Systems Service Pack 2 (Server Core installation)
Version: Itanium-Based Systems Service Pack 2
Version: x64-based Systems Service Pack 2
Version: x64-based Systems Service Pack 2 (Server Core installation)
 Create a notification for this product.
   Microsoft Windows 7 Version: 32-bit Systems Service Pack 1
Version: x64-based Systems Service Pack 1
 Create a notification for this product.
   Microsoft Windows Server 2008 R2 Version: Itanium-Based Systems Service Pack 1
Version: x64-based Systems Service Pack 1
Version: x64-based Systems Service Pack 1 (Server Core installation)
 Create a notification for this product.
CISA Known exploited vulnerability
Data from the Known Exploited Vulnerabilities Catalog

Date added: 2022-05-23

Due date: 2022-06-13

Required action: Apply updates per vendor instructions.

Used in ransomware: Unknown

Notes: https://nvd.nist.gov/vuln/detail/CVE-2018-8589

Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T07:02:25.739Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "105796",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/105796",
               },
               {
                  name: "1042140",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1042140",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "LOCAL",
                     availabilityImpact: "HIGH",
                     baseScore: 7.8,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "LOW",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2018-8589",
                        options: [
                           {
                              Exploitation: "active",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-07T16:23:58.282862Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
               {
                  other: {
                     content: {
                        dateAdded: "2022-05-23",
                        reference: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589",
                     },
                     type: "kev",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        description: "CWE-noinfo Not enough information",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-07T16:38:18.148Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Windows Server 2008",
               vendor: "Microsoft",
               versions: [
                  {
                     status: "affected",
                     version: "32-bit Systems Service Pack 2",
                  },
                  {
                     status: "affected",
                     version: "32-bit Systems Service Pack 2 (Server Core installation)",
                  },
                  {
                     status: "affected",
                     version: "Itanium-Based Systems Service Pack 2",
                  },
                  {
                     status: "affected",
                     version: "x64-based Systems Service Pack 2",
                  },
                  {
                     status: "affected",
                     version: "x64-based Systems Service Pack 2 (Server Core installation)",
                  },
               ],
            },
            {
               product: "Windows 7",
               vendor: "Microsoft",
               versions: [
                  {
                     status: "affected",
                     version: "32-bit Systems Service Pack 1",
                  },
                  {
                     status: "affected",
                     version: "x64-based Systems Service Pack 1",
                  },
               ],
            },
            {
               product: "Windows Server 2008 R2",
               vendor: "Microsoft",
               versions: [
                  {
                     status: "affected",
                     version: "Itanium-Based Systems Service Pack 1",
                  },
                  {
                     status: "affected",
                     version: "x64-based Systems Service Pack 1",
                  },
                  {
                     status: "affected",
                     version: "x64-based Systems Service Pack 1 (Server Core installation)",
                  },
               ],
            },
         ],
         datePublic: "2018-11-13T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \"Windows Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Elevation of Privilege",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-11-15T10:57:01.000Z",
            orgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
            shortName: "microsoft",
         },
         references: [
            {
               name: "105796",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/105796",
            },
            {
               name: "1042140",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1042140",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secure@microsoft.com",
               ID: "CVE-2018-8589",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Windows Server 2008",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "32-bit Systems Service Pack 2",
                                       },
                                       {
                                          version_value: "32-bit Systems Service Pack 2 (Server Core installation)",
                                       },
                                       {
                                          version_value: "Itanium-Based Systems Service Pack 2",
                                       },
                                       {
                                          version_value: "x64-based Systems Service Pack 2",
                                       },
                                       {
                                          version_value: "x64-based Systems Service Pack 2 (Server Core installation)",
                                       },
                                    ],
                                 },
                              },
                              {
                                 product_name: "Windows 7",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "32-bit Systems Service Pack 1",
                                       },
                                       {
                                          version_value: "x64-based Systems Service Pack 1",
                                       },
                                    ],
                                 },
                              },
                              {
                                 product_name: "Windows Server 2008 R2",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "Itanium-Based Systems Service Pack 1",
                                       },
                                       {
                                          version_value: "x64-based Systems Service Pack 1",
                                       },
                                       {
                                          version_value: "x64-based Systems Service Pack 1 (Server Core installation)",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Microsoft",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \"Windows Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Elevation of Privilege",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "105796",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/105796",
                  },
                  {
                     name: "1042140",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1042140",
                  },
                  {
                     name: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589",
                     refsource: "CONFIRM",
                     url: "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
      assignerShortName: "microsoft",
      cveId: "CVE-2018-8589",
      datePublished: "2018-11-14T01:00:00.000Z",
      dateReserved: "2018-03-14T00:00:00.000Z",
      dateUpdated: "2025-02-07T16:38:18.148Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      cisa_known_exploited: {
         cveID: "CVE-2018-8589",
         dateAdded: "2022-05-23",
         dueDate: "2022-06-13",
         knownRansomwareCampaignUse: "Unknown",
         notes: "https://nvd.nist.gov/vuln/detail/CVE-2018-8589",
         product: "Win32k",
         requiredAction: "Apply updates per vendor instructions.",
         shortDescription: "A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.",
         vendorProject: "Microsoft",
         vulnerabilityName: "Microsoft Win32k Privilege Escalation Vulnerability",
      },
      nvd: "{\"cve\":{\"id\":\"CVE-2018-8589\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2018-11-14T01:29:02.067\",\"lastModified\":\"2025-04-04T15:32:36.710\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \\\"Windows Win32k Elevation of Privilege Vulnerability.\\\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.\"},{\"lang\":\"es\",\"value\":\"Existe una vulnerabilidad de elevación de privilegios cuando Windows gestiona incorrectamente las llamadas a Win32k.sys. Esto también se conoce como \\\"Windows Win32k Elevation of Privilege Vulnerability\\\". Esto afecta a Windows Server 2008, Windows 7 y Windows Server 2008 R2.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":7.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"cisaExploitAdd\":\"2022-05-23\",\"cisaActionDue\":\"2022-06-13\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Microsoft Win32k Privilege Escalation Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F422A8C-2C4E-42C8-B420-E0728037E15C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*\",\"matchCriteriaId\":\"B320A104-9037-487E-BC9A-62B4A6B49FD0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/105796\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\",\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1042140\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\",\"Broken Link\"]},{\"url\":\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/105796\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\",\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1042140\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\",\"Broken Link\"]},{\"url\":\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.securityfocus.com/bid/105796\", \"name\": \"105796\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1042140\", \"name\": \"1042140\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"]}, {\"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T07:02:25.739Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2018-8589\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-07T16:23:58.282862Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2022-05-23\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-07T16:25:43.350Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008\", \"versions\": [{\"status\": \"affected\", \"version\": \"32-bit Systems Service Pack 2\"}, {\"status\": \"affected\", \"version\": \"32-bit Systems Service Pack 2 (Server Core installation)\"}, {\"status\": \"affected\", \"version\": \"Itanium-Based Systems Service Pack 2\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 2\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 2 (Server Core installation)\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows 7\", \"versions\": [{\"status\": \"affected\", \"version\": \"32-bit Systems Service Pack 1\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 1\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Windows Server 2008 R2\", \"versions\": [{\"status\": \"affected\", \"version\": \"Itanium-Based Systems Service Pack 1\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 1\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 1 (Server Core installation)\"}]}], \"datePublic\": \"2018-11-13T00:00:00.000Z\", \"references\": [{\"url\": \"http://www.securityfocus.com/bid/105796\", \"name\": \"105796\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"]}, {\"url\": \"http://www.securitytracker.com/id/1042140\", \"name\": \"1042140\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"]}, {\"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \\\"Windows Win32k Elevation of Privilege Vulnerability.\\\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Elevation of Privilege\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2018-11-15T10:57:01.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"32-bit Systems Service Pack 2\"}, {\"version_value\": \"32-bit Systems Service Pack 2 (Server Core installation)\"}, {\"version_value\": \"Itanium-Based Systems Service Pack 2\"}, {\"version_value\": \"x64-based Systems Service Pack 2\"}, {\"version_value\": \"x64-based Systems Service Pack 2 (Server Core installation)\"}]}, \"product_name\": \"Windows Server 2008\"}, {\"version\": {\"version_data\": [{\"version_value\": \"32-bit Systems Service Pack 1\"}, {\"version_value\": \"x64-based Systems Service Pack 1\"}]}, \"product_name\": \"Windows 7\"}, {\"version\": {\"version_data\": [{\"version_value\": \"Itanium-Based Systems Service Pack 1\"}, {\"version_value\": \"x64-based Systems Service Pack 1\"}, {\"version_value\": \"x64-based Systems Service Pack 1 (Server Core installation)\"}]}, \"product_name\": \"Windows Server 2008 R2\"}]}, \"vendor_name\": \"Microsoft\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"http://www.securityfocus.com/bid/105796\", \"name\": \"105796\", \"refsource\": \"BID\"}, {\"url\": \"http://www.securitytracker.com/id/1042140\", \"name\": \"1042140\", \"refsource\": \"SECTRACK\"}, {\"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\", \"name\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\", \"refsource\": \"CONFIRM\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \\\"Windows Win32k Elevation of Privilege Vulnerability.\\\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Elevation of Privilege\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2018-8589\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"secure@microsoft.com\"}}}}",
         cveMetadata: "{\"cveId\": \"CVE-2018-8589\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-07T16:38:18.148Z\", \"dateReserved\": \"2018-03-14T00:00:00.000Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2018-11-14T01:00:00.000Z\", \"assignerShortName\": \"microsoft\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.