CVE-2019-0797KEV · OVERDUE

Microsoft Win32k Privilege Escalation Vulnerability

High · published April 9, 2019

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 79.1th percentile for exploit probability.

1634
days past CISA
deadline
CVSS v3.1
7.8
EPSS
2%
Percentile
79.1
In the wild
Confirmed
What it is

🚨 A sneaky memory mishap in Windows opens the door for attackers to seize control! 🔥 Think of it like a restaurant where a waiter mistakenly gives out the keys to the kitchen — once in, anyone can whip up their own dish, or worse, poison the entire menu! An attacker could leverage this vulnerability to run arbitrary code in the system's kernel, granting them full control over the system. This means they could access sensitive information, install malicious software, or even take over the entire machine without the user's knowledge. Absolutely devastating!

Put simply

Think of it like a restaurant where a waiter mistakenly gives out the keys to the kitchen — once in, anyone can whip up their own dish, or worse, poison the entire menu! This elevation of privilege vulnerability arises from the Win32k component failing to handle objects in memory correctly, allowing an attacker to exploit this flaw and execute unauthorized actions on the system.

What to do

An attacker could leverage this vulnerability to run arbitrary code in the system's kernel, granting them full control over the system. This means they could access sensitive information, install malicious software, or even take over the entire machine without the user's knowledge. Absolutely devastating! First, ensure your Windows system is updated to the latest version, which includes the necessary patches for this vulnerability. Regularly monitor your systems for unusual behavior and apply security updates promptly to prevent exploitation. You've got this! Stay vigilant and proactive, and you'll keep your system safe from harm! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01874 · 79.1th percentile
Published
2019-04-09T02:34Z
KEV added
2021-11-03 · due 2022-05-03
EPSS history
Timeline
  • 03 NOV 00:00Z
    Added to CISA KEV — remediate by May 3
    kev
  • 09 APR 02:34Z
    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of…
    cvelistv5