CVE-2018-8589

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Win32k
Date Added 2022-05-23
Remediation Due 2022-06-13
https://nvd.nist.gov/vuln/detail/CVE-2018-8589

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →