Microsoft Win32k Privilege Escalation Vulnerability

ALTO 7.8EXPLOITED (CISA KEV)CVE-2018-8589 · Published 14/11/2018 · updated 17/06/2026

Microsoft Win32k Privilege Escalation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 23/05/2022. Patch affected systems as an emergency.

En resumen

CVE-2018-8589 es una vulnerabilidad ALTO (CVSS 7.8).
Explotada activamente: CISA la añadió al catálogo KEV el 23/05/2022.
Probabilidad de explotación en los próximos 30 días (EPSS): 3.0%, mayor que el 87.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
Win32k Microsoft	Versions not published yet (product named by CISA KEV)

Description

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

References

securityfocus.com/bid/105796 · Broken Link
securitytracker.com/id/1042140 · Broken Link
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589 · Patch
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2018-8589

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free