CVE-2018-8589
Microsoft Win32k Privilege Escalation Vulnerability
CVSS
—
No CVSS
EPSS
3.0%
p87
KEV
YES
May 23, 2022
Exploit Today
76
0-100
Published: — · Last modified: —
3.0%EPSS · 30 days3.0%
2026-09-162026-10-14
Product
Microsoft / Win32k
Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Added to KEV
May 23, 2022
Remediate by
Jun 13, 2022
Known ransomware use
No
Summary description
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2018-8589
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-218827.0 HIG99.1%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability62dCVE-2021-17327.8 HIG99.6%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability65dCVE-2020-10547.0 HIG99.0%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability8dCVE-2019-14587.8 HIG99.5%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability65dCVE-2018-84537.8 HIG99.4%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability64dCVE-2018-81207.0 HIG99.5%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d