CVE Watch—

CVE-2018-8589

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

—

Sin CVSS

EPSS

3.0%

p87

KEV

SÍ

23 may 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

3.0%EPSS · 30 días3.0%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Microsoft / Win32k

Vulnerabilidad

Microsoft Win32k Privilege Escalation Vulnerability

Añadido a KEV

23 may 2022

Remediar antes de

13 jun 2022

Uso conocido en ransomware

Descripción resumida

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2018-8589

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2022-218827.0 ALT

99.1%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability62d CVE-2021-17327.8 ALT

99.6%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2020-10547.0 ALT

99.0%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability8d CVE-2019-14587.8 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2018-84537.8 ALT

99.4%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d CVE-2018-81207.0 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d