Firetruck

CVE-2018-8639

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Windows 10Microsoft / Windows 1032-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1607 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1607 for x64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1703 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1703 for x64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1709 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1709 for ARM64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1709 for x64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1803 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1803 for ARM64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1803 for x64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1809 for 32-bit Systemsaffected
Windows 10Microsoft / Windows 10Version 1809 for ARM64-based Systemsaffected
Windows 10Microsoft / Windows 10Version 1809 for x64-based Systemsaffected
Windows 10Microsoft / Windows 10x64-based Systemsaffected
Windows 10 ServersMicrosoft / Windows 10 Serversversion 1709 (Server Core Installation)affected
Windows 10 ServersMicrosoft / Windows 10 Serversversion 1803 (Server Core Installation)affected
Windows 7Microsoft / Windows 732-bit Systems Service Pack 1affected
Windows 7Microsoft / Windows 7x64-based Systems Service Pack 1affected
Windows 8.1Microsoft / Windows 8.132-bit systemsaffected
Windows 8.1Microsoft / Windows 8.1x64-based systemsaffected
Windows RT 8.1Microsoft / Windows RT 8.1Windows RT 8.1affected
Windows Server 2008Microsoft / Windows Server 200832-bit Systems Service Pack 2affected
Windows Server 2008Microsoft / Windows Server 200832-bit Systems Service Pack 2 (Server Core installation)affected
Windows Server 2008Microsoft / Windows Server 2008Itanium-Based Systems Service Pack 2affected
Windows Server 2008Microsoft / Windows Server 2008x64-based Systems Service Pack 2affected
Windows Server 2008Microsoft / Windows Server 2008x64-based Systems Service Pack 2 (Server Core installation)affected
Windows Server 2008 R2Microsoft / Windows Server 2008 R2Itanium-Based Systems Service Pack 1affected
Windows Server 2008 R2Microsoft / Windows Server 2008 R2x64-based Systems Service Pack 1affected
Windows Server 2008 R2Microsoft / Windows Server 2008 R2x64-based Systems Service Pack 1 (Server Core installation)affected
Windows Server 2012Microsoft / Windows Server 2012(Server Core installation)affected
Windows Server 2012 R2Microsoft / Windows Server 2012 R2(Server Core installation)affected
Windows Server 2016Microsoft / Windows Server 2016(Server Core installation)affected
Windows Server 2019Microsoft / Windows Server 2019(Server Core installation)affected