CVE Watch—

CVE-2019-0797

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

1.9%

p79

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

1.9%EPSS · 30 days1.9%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Win32k

Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-0797

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2022-218827.0 HIG

99.1%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability62d CVE-2021-17327.8 HIG

99.6%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2020-10547.0 HIG

99.0%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability8d CVE-2019-14587.8 HIG

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2018-84537.8 HIG

99.4%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d CVE-2018-81207.0 HIG

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d