CVE Watch—

CVE-2018-8589

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

—

Sin CVSS

EPSS

3.0%

p87

KEV

SÍ

23 may 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

3.0%EPSS · 30 días3.0%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Microsoft / Win32k

Vulnerabilidad

Microsoft Win32k Privilege Escalation Vulnerability

Añadido a KEV

23 may 2022

Remediar antes de

13 jun 2022

Uso conocido en ransomware

Descripción resumida

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2018-8589

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2022-218827.0 ALT

99.0%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability17d CVE-2021-17327.8 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability20d CVE-2020-10547.0 ALT

98.9%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability12d CVE-2019-14587.8 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability20d CVE-2018-84537.8 ALT

99.3%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability19d CVE-2018-81207.0 ALT

99.4%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability19d