CVE Watch—

CVE-2018-8589

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

—

Sem CVSS

EPSS

3.0%

p88

KEV

SIM

23 de mai. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

3.0%EPSS · 30 dias3.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Win32k

Vulnerabilidade

Microsoft Win32k Privilege Escalation Vulnerability

Adicionado ao KEV

23 de mai. de 2022

Corrigir até

13 de jun. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2018-8589

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2022-218827.0 ALT

99.1%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability83d CVE-2021-17327.8 ALT

99.6%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability86d CVE-2020-10547.0 ALT

99.0%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability29d CVE-2019-14587.8 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability86d CVE-2018-84537.8 ALT

99.4%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability85d CVE-2018-81207.0 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability85d