{"history":[{"alert":0,"cve":"CVE-2018-8589","id":21808,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.03023, \"percentile\": 0.87648}"},{"alert":0,"cve":"CVE-2018-8589","id":19425,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.03023, \"percentile\": 0.8757}"},{"alert":0,"cve":"CVE-2018-8589","id":17391,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.03023, \"percentile\": 0.87554}"},{"alert":0,"cve":"CVE-2018-8589","id":15454,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.03023, \"percentile\": 0.87547}"},{"alert":0,"cve":"CVE-2018-8589","id":13432,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.03023, \"percentile\": 0.87538}"},{"alert":0,"cve":"CVE-2018-8589","id":11214,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.03023, \"percentile\": 0.87519}"},{"alert":1,"cve":"CVE-2018-8589","id":10745,"kind":"cna","observed_at":1793960400,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-05T07:02:25.739Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"105796\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/105796\"}, {\"name\": \"1042140\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id/1042140\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"LOCAL\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2018-8589\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-07T16:23:58.282862Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-05-23\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-noinfo Not enough information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:45:47.156Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-05-23T00:00:00.000Z\", \"value\": \"CVE-2018-8589 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Windows Server 2008\", \"vendor\": \"Microsoft\", \"versions\": [{\"status\": \"affected\", \"version\": \"32-bit Systems Service Pack 2\"}, {\"status\": \"affected\", \"version\": \"32-bit Systems Service Pack 2 (Server Core installation)\"}, {\"status\": \"affected\", \"version\": \"Itanium-Based Systems Service Pack 2\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 2\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 2 (Server Core installation)\"}]}, {\"product\": \"Windows 7\", \"vendor\": \"Microsoft\", \"versions\": [{\"status\": \"affected\", \"version\": \"32-bit Systems Service Pack 1\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 1\"}]}, {\"product\": \"Windows Server 2008 R2\", \"vendor\": \"Microsoft\", \"versions\": [{\"status\": \"affected\", \"version\": \"Itanium-Based Systems Service Pack 1\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 1\"}, {\"status\": \"affected\", \"version\": \"x64-based Systems Service Pack 1 (Server Core installation)\"}]}], \"datePublic\": \"2018-11-13T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \\\"Windows Win32k Elevation of Privilege Vulnerability.\\\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Elevation of Privilege\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2018-11-15T10:57:01.000Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"105796\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/105796\"}, {\"name\": \"1042140\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id/1042140\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"secure@microsoft.com\", \"ID\": \"CVE-2018-8589\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Windows Server 2008\", \"version\": {\"version_data\": [{\"version_value\": \"32-bit Systems Service Pack 2\"}, {\"version_value\": \"32-bit Systems Service Pack 2 (Server Core installation)\"}, {\"version_value\": \"Itanium-Based Systems Service Pack 2\"}, {\"version_value\": \"x64-based Systems Service Pack 2\"}, {\"version_value\": \"x64-based Systems Service Pack 2 (Server Core installation)\"}]}}, {\"product_name\": \"Windows 7\", \"version\": {\"version_data\": [{\"version_value\": \"32-bit Systems Service Pack 1\"}, {\"version_value\": \"x64-based Systems Service Pack 1\"}]}}, {\"product_name\": \"Windows Server 2008 R2\", \"version\": {\"version_data\": [{\"version_value\": \"Itanium-Based Systems Service Pack 1\"}, {\"version_value\": \"x64-based Systems Service Pack 1\"}, {\"version_value\": \"x64-based Systems Service Pack 1 (Server Core installation)\"}]}}]}, \"vendor_name\": \"Microsoft\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \\\"Windows Win32k Elevation of Privilege Vulnerability.\\\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Elevation of Privilege\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"105796\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/105796\"}, {\"name\": \"1042140\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id/1042140\"}, {\"name\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\", \"refsource\": \"CONFIRM\", \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2018-8589\", \"datePublished\": \"2018-11-14T01:00:00.000Z\", \"dateReserved\": \"2018-03-14T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:45:47.156Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2018-8589","id":8960,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.03023, \"percentile\": 0.87508}"},{"alert":0,"cve":"CVE-2018-8589","id":6748,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.03023, \"percentile\": 0.87496}"},{"alert":0,"cve":"CVE-2018-8589","id":4525,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.03023, \"percentile\": 0.87476}"},{"alert":0,"cve":"CVE-2018-8589","id":2307,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.03023, \"percentile\": 0.8746}"},{"alert":1,"cve":"CVE-2018-8589","id":1104,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2018-8589\", \"cwes\": [], \"dateAdded\": \"2022-05-23\", \"dueDate\": \"2022-06-13\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2018-8589\", \"product\": \"Win32k\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft Win32k Privilege Escalation Vulnerability\"}"}],"record":{"affected":[{"product":"Windows Server 2008","vendor":"Microsoft","versions":[{"status":"affected","version":"32-bit Systems Service Pack 2"},{"status":"affected","version":"32-bit Systems Service Pack 2 (Server Core installation)"},{"status":"affected","version":"Itanium-Based Systems Service Pack 2"},{"status":"affected","version":"x64-based Systems Service Pack 2"},{"status":"affected","version":"x64-based Systems Service Pack 2 (Server Core installation)"}]},{"product":"Windows 7","vendor":"Microsoft","versions":[{"status":"affected","version":"32-bit Systems Service Pack 1"},{"status":"affected","version":"x64-based Systems Service Pack 1"}]},{"product":"Windows Server 2008 R2","vendor":"Microsoft","versions":[{"status":"affected","version":"Itanium-Based Systems Service Pack 1"},{"status":"affected","version":"x64-based Systems Service Pack 1"},{"status":"affected","version":"x64-based Systems Service Pack 1 (Server Core installation)"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T07:02:25.739Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"105796","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/105796"},{"name":"1042140","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1042140"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2018-8589","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-07T16:23:58.282862Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-05-23","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:45:47.156Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589"}],"timeline":[{"lang":"en","time":"2022-05-23T00:00:00.000Z","value":"CVE-2018-8589 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Windows Server 2008","vendor":"Microsoft","versions":[{"status":"affected","version":"32-bit Systems Service Pack 2"},{"status":"affected","version":"32-bit Systems Service Pack 2 (Server Core installation)"},{"status":"affected","version":"Itanium-Based Systems Service Pack 2"},{"status":"affected","version":"x64-based Systems Service Pack 2"},{"status":"affected","version":"x64-based Systems Service Pack 2 (Server Core installation)"}]},{"product":"Windows 7","vendor":"Microsoft","versions":[{"status":"affected","version":"32-bit Systems Service Pack 1"},{"status":"affected","version":"x64-based Systems Service Pack 1"}]},{"product":"Windows Server 2008 R2","vendor":"Microsoft","versions":[{"status":"affected","version":"Itanium-Based Systems Service Pack 1"},{"status":"affected","version":"x64-based Systems Service Pack 1"},{"status":"affected","version":"x64-based Systems Service Pack 1 (Server Core installation)"}]}],"datePublic":"2018-11-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \"Windows Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2."}],"problemTypes":[{"descriptions":[{"description":"Elevation of Privilege","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-11-15T10:57:01.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"105796","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/105796"},{"name":"1042140","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1042140"},{"tags":["x_refsource_CONFIRM"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","ID":"CVE-2018-8589","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Windows Server 2008","version":{"version_data":[{"version_value":"32-bit Systems Service Pack 2"},{"version_value":"32-bit Systems Service Pack 2 (Server Core installation)"},{"version_value":"Itanium-Based Systems Service Pack 2"},{"version_value":"x64-based Systems Service Pack 2"},{"version_value":"x64-based Systems Service Pack 2 (Server Core installation)"}]}},{"product_name":"Windows 7","version":{"version_data":[{"version_value":"32-bit Systems Service Pack 1"},{"version_value":"x64-based Systems Service Pack 1"}]}},{"product_name":"Windows Server 2008 R2","version":{"version_data":[{"version_value":"Itanium-Based Systems Service Pack 1"},{"version_value":"x64-based Systems Service Pack 1"},{"version_value":"x64-based Systems Service Pack 1 (Server Core installation)"}]}}]},"vendor_name":"Microsoft"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \"Windows Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Elevation of Privilege"}]}]},"references":{"reference_data":[{"name":"105796","refsource":"BID","url":"http://www.securityfocus.com/bid/105796"},{"name":"1042140","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1042140"},{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589","refsource":"CONFIRM","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589"}]}}}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2018-8589","datePublished":"2018-11-14T01:00:00.000Z","dateReserved":"2018-03-14T00:00:00.000Z","dateUpdated":"2025-10-21T23:45:47.156Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1793960400,"cve":"CVE-2018-8589","description":"An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka \"Windows Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.","epss":{"date":"2026-11-12","epss":0.03023,"percentile":0.87648},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2018-8589","cwes":[],"dateAdded":"2022-05-23","dueDate":"2022-06-13","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8589","product":"Win32k","requiredAction":"Apply updates per vendor instructions.","shortDescription":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.","vendorProject":"Microsoft","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability"},"kev_checked":1794522003,"products":"Microsoft Windows Server 2008, Microsoft Windows 7, Microsoft Windows Server 2008 R2","references":["http://www.securityfocus.com/bid/105796","http://www.securitytracker.com/id/1042140","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8589"],"score":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Microsoft Win32k Privilege Escalation Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}