CVE-2019-1458
Microsoft Win32k Privilege Escalation Vulnerability
CVSS
7.8
Alto
EPSS
74.4%
p99
KEV
SÍ
10 ene 2022
Exploit Today
80
0-100
Publicado: 10 dic 2019 · Última mod.: 12 ago 2026
Producto
Microsoft / Win32k
Vulnerabilidad
Microsoft Win32k Privilege Escalation Vulnerability
Añadido a KEV
10 ene 2022
Remediar antes de
10 jul 2022
Uso conocido en ransomware
Sí
Descripción resumida
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2019-1458
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458
- packetstormsecurity.comhttp://packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1458