CVE Watch—

CVE-2019-0859

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

4.2%

p91

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

4.2%EPSS · 30 days4.2%

2026-09-162026-10-14

KEV catalog record

Product

Microsoft / Win32k

Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Yes

Summary description

Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-0859

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2022-218827.0 HIG

99.1%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability62d CVE-2021-17327.8 HIG

99.6%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2020-10547.0 HIG

99.0%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability8d CVE-2019-14587.8 HIG

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2018-84537.8 HIG

99.4%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d CVE-2018-81207.0 HIG

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d