CVE-2018-8639

Timeline

Detection, updates, and resolution for this record.

1. Dec 11, 2018 · Catalog

   Detected

   An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This

2. Mar 3, 2025 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

3. Mar 24, 2025 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

4. Jun 16, 2026 · Catalog

   Updated

   An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This

Affected

• cpe microsoft/windows 10 1507version unspecified
• cpe microsoft/windows 10 1607version unspecified
• cpe microsoft/windows 10 1703version unspecified
• cpe microsoft/windows 10 1709version unspecified
• cpe microsoft/windows 10 1803version unspecified
• cpe microsoft/windows 10 1809version unspecified
• cpe microsoft/windows 7version unspecified
• cpe microsoft/windows 8.1version unspecified
• vendor Microsoft Windowsversion unspecified

Sources

• CISA KEVCVE-2018-8639

  Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

  cisa.gov
• CVE.orgCVE-2018-8639

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2018-8639

  30-day exploitation probability 22.2%

  first.org
• NIST NVDCVE-2018-8639

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2

  nvd.nist.gov

References

• Broken Link · securityfocus.com
• CISA note · msrc.microsoft.com
• CISA note · nvd.nist.gov
• Patch · portal.msrc.microsoft.com
• US Government Resource · cisa.gov