PoC Index

CVE-2019-0859

KEVHIGH 7.8EPSS 4.2%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.

CVSS v3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
4.15% chance of exploitation in the next 30 days, 90th percentile
CISA KEV
added 2021-11-03
Published
2019-04-09
Updated
2025-10-21

Proof-of-concept exploits (1)

References

Related