Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Description
Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Turn on Microsoft alerts
Details
- Vendor
- Microsoft
- Product
- Windows
- CVE
- CVE-2018-8639
- Affected versions
- Windows 10 1507: Windows 10 1507
Windows 10 1607: Windows 10 1607
Windows 10 1703: Windows 10 1703
Windows 10 1709: Windows 10 1709
Windows 10 1803: Windows 10 1803
Windows 10 1809: Windows 10 1809
Windows 7: Windows 7 SP1
Windows 8.1 8.1: Windows 8.1
Windows RT 8.1 8.1: Windows RT 8.1
Windows Server 2008: Windows Server 2008 SP2
Windows Server 2008 R2: Windows Server 2008 R2, R2 SP1
Windows Server 2012 2012: Windows Server 2012
Windows Server 2012 R2: Windows Server 2012 R2
Windows Server 2016 2016: Windows Server 2016
Windows Server 2019 2019: Windows Server 2019 (from the advisory and NVD; check the exact builds in the official advisory) - CVSS score
- 7.8
- Actively exploited
- Yes, listed in the CISA Known Exploited Vulnerabilities catalog
- CISA due date
- March 24, 2025 (deadline for US federal agencies: a good benchmark for you too)
- Source
- CISA KEV – original advisory
- Published
- March 3, 2025
The description and the recommended action are quoted from the public advisory; severity, exploitation status and affected versions are compiled automatically from public sources and may contain errors. The vendor's original advisory prevails: check it before taking action. This information is provided without warranty and does not replace a professional assessment.