Umbra Wiki cve cve/CVE-2018-8589
Back to wiki

CVE-2018-8589 — Microsoft Win32k Privilege Escalation Vulnerability

provenance: imported · CVE: CVE-2018-8589

CVE-2018-8589: Microsoft Win32k Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Microsoft
Product Win32k
Date added 2022-05-23
Due date 2022-06-13
Ransomware campaign use Unknown

Description

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8589

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-8589
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog