CVE-2018-8589: Microsoft Windows Server 2008 vulnerability

1. In CISA KEVCISA KEV catalogue23 May 2022
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

• Microsoft · Windows Server 200832-bit Systems Service Pack 2; 32-bit Systems Service Pack 2 (Server Core installation); Itanium-Based Systems Service Pack 2; x64-based Systems Service Pack 2; x64-based Systems Service Pack 2 (Server Core installation)
• Microsoft · Windows 732-bit Systems Service Pack 1; x64-based Systems Service Pack 1
• Microsoft · Windows Server 2008 R2Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 23 May 2022 · catalogue entry

Public check

No public nuclei template

Vendor

Microsoft

Published

November 2018

Band

Exploited in the wild, November 2018

1. 23 May 2022
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• securityfocus.com/bid/105796securityfocus.com
• securitytracker.com/id/1042140securitytracker.com
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com