[ CVE-2018-8589 · Published 14 Nov 2018 ]
Microsoft Win32k Privilege Escalation Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 3%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-05-23
[ Description ]Official description
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
CISA: A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 13 Jun 2022): Apply updates per vendor instructions.
- Patch on portal.msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- www.securityfocus.com/bid/105796Broken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1042140Broken LinkThird Party AdvisoryVDB Entry
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589PatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource