CVE-2019-1458
Microsoft Win32k Privilege Escalation Vulnerability
CVSS
7.8
Alta
EPSS
74.4%
p99
KEV
SIM
10 de jan. de 2022
Exploit Today
80
0-100
Publicado: 10 de dez. de 2019 · Última mod.: 12 de ago. de 2026
Produto
Microsoft / Win32k
Vulnerabilidade
Microsoft Win32k Privilege Escalation Vulnerability
Adicionado ao KEV
10 de jan. de 2022
Corrigir até
10 de jul. de 2022
Uso conhecido em ransomware
Sim
Descrição resumida
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2019-1458
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458
- packetstormsecurity.comhttp://packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1458