HIGHCVSS v3.1 7.8Actively exploited · CISA KEV since 2022-05-23Vulnerability
CVE-2018-8589
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
Properties
- Euvd product
- Windows Server 2008 R2, Windows 7, Windows Server 2008
- Vulnerability name
- Microsoft Win32k Privilege Escalation Vulnerability
- First seen
- 2025-10-21T23:45:47+00:00
- Cvss score
- 7.8
- Epss score
- 0.03023
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2022-06-13
- Euvd assigner
- microsoft
- Retrieved at
- 2026-10-21T01:24:47+00:00
- Exploited euvd since
- 2022-05-23T00:00:00+00:00
- Src batch id
- epss_history-20261020T103617Z-728ddd
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2022-05-23
- Score
- 7.8
- Euvd base score version
- 3.1
- Fetched at
- 2026-10-20T10:36:20+00:00
- Euvd vendor
- Microsoft
- Cvss vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 7.8
Related Entities (6)
AFFECTS_PRODUCT (4)
DESCRIBES (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph