CVE-2018-8589VulnerabilityPublished 05/23/2022Updated 10/24/2026

CVE-2018-8589: Microsoft Win32k Privilege Escalation Vulnerability

Affects Microsoft Win32kSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/23/2022
KEV deadline: 06/13/2022
EPSS: 3.0% chance of exploitation in 30 days – higher than 87% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-8589 (opens in a new tab)

Description

CVE-2018-8589 is a privilege escalation vulnerability in Microsoft Windows Win32k.sys where improper handling of calls allows an attacker to execute code with local system privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data.

Summary

This vulnerability arises from improper handling of calls to the Win32k.sys component in Microsoft Windows, enabling an attacker to escalate privileges by executing code in the security context of the local system. It has been confirmed as exploited in the wild, indicating active threat usage. No detailed version or patch information is included in the provided data.

Impact

Successful exploitation allows an attacker to run code with local system privileges, potentially leading to full control over the affected system. The vulnerability has been observed in active exploitation campaigns.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:40:43 UTC

References

Related threats