CVE-2018-8589 Microsoft Win32k
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Win32k Privilege Escalation Vulnerability
- Added
- 2022-05-23
- Federal patch deadline
- 2022-06-13
- Ransomware use
- not known