CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
5DescriptionNVD
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.
AnalysisAI
Windows Win32k fails to properly handle objects in memory, allowing local privilege escalation exploited in the wild in April 2019 as part of targeted APT exploit chains.
Technical ContextAI
The Win32k vulnerability involves improper management of window objects in kernel memory. A crafted application triggers a condition allowing kernel memory corruption and token manipulation for privilege escalation.
Affected ProductsAI
Multiple Windows versions affected
RemediationAI
Apply Microsoft security update. Deploy Win32k attack surface reduction through Exploit Guard. Monitor for kernel exploitation indicators.
Share
External POC / Exploit Code
Leaving vuln.today