CVE-2018-8639

CVE-2018-8639 is an elevation of privilege vulnerability in the Windows Win32k component, affecting numerous Windows versions from 7 to 10 and various Server editions. It has a high CVSS score of 7.8, indicating a local attack vector with low complexity, allowing an authenticated attacker to gain full control over the system, impacting confidentiality, integrity, and availability. This vulnerability is actively exploited in the wild, including in known ransomware campaigns, and has garnered significant community discussion and media coverage, despite no public exploit code being available on common platforms like Metasploit or ExploitDB. Its high FAUCET Risk Score of 99/100 further emphasizes its critical nature.