An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/106093 | Broken Link Third Party Advisory VDB Entry |
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8639 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/106093 | Broken Link Third Party Advisory VDB Entry |
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8639 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Jun 2025, 20:58
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/106093 - Broken Link, Third Party Advisory, VDB Entry | |
CPE | cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* |
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:* |
06 Jun 2025, 18:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* |
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:* |
First Time |
Microsoft windows 10 1709
Microsoft windows 10 1507 Microsoft windows 10 1803 Microsoft windows 10 1703 Microsoft windows 10 1607 Microsoft windows 10 1809 |
21 Nov 2024, 04:14
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/106093 - Third Party Advisory, VDB Entry | |
References | () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8639 - Patch, Vendor Advisory |
Information
Published : 2018-12-12 00:29
Updated : 2025-06-09 20:58
NVD link : CVE-2018-8639
Mitre link : CVE-2018-8639
CVE.ORG link : CVE-2018-8639
JSON object : View
Products Affected
microsoft
- windows_10_1709
- windows_rt_8.1
- windows_server_2016
- windows_10_1803
- windows_8.1
- windows_server_2008
- windows_10_1703
- windows_10_1809
- windows_7
- windows_server_2019
- windows_10_1507
- windows_server_2012
- windows_10_1607
CWE
CWE-404
Improper Resource Shutdown or Release