Actively exploited in the wild
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2025-03-03. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2018-8639
HighCVSS 7.8KEVSummary
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.
Risk Assessment
An attacker could exploit this vulnerability to elevate privileges on the system, potentially leading to full system compromise. However, prior access to the system is required.
Recommendation
Apply the security updates provided by Microsoft for all affected Windows versions. Regularly update systems and monitor for unusual activities.
Other vulnerabilities in Microsoft Windows Win32k
Original NVD description (English source)
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.