CVE-2019-0803 — Microsoft Win32k Privilege Escalation Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2021-11-03 00:00 UTC
  • Importiert: 2026-10-20 22:46 UTC
  • CVSS: 7.8
  • Quelle-ID: cisa_kev
  • uid_hash: 9a40b0c4218fc278af22128b8e6d263aeb2b6c78b348eaeac18166dabe0eedf8

Inhalt

Vendor / Project: Microsoft Product: Win32k Description: Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. Required Action: Apply updates per vendor instructions. Due Date: 2022-05-03 Ransomware Campaign Use: Known Notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0803

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2019-0803

HIGH

7.8

HIGH

7.8

2019-04-09

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CISA – Known Exploited Vulnerabilities (KEV)

cisa_kev

threat_intel cisa, kev - de https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json