Microsoft Win32k Privilege Escalation Vulnerability

Timeline

Detection, updates, and resolution for this record.

1. Apr 8, 2019 · Catalog

   Detected

   An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.

Affected

• cpe microsoft/windows 10 1507version unspecified
• cpe microsoft/windows 10 1607version unspecified
• cpe microsoft/windows 10 1703version unspecified
• cpe microsoft/windows 10 1709version unspecified
• vendor Microsoft Win32kversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2019-0797

  Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

  cisa.gov
• CVE.orgVulnerability recordCVE-2019-0797

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2019-0797

  30-day exploitation probability 1.9%

  first.org
• NIST NVDVulnerability recordCVE-2019-0797

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Patch · portal.msrc.microsoft.com
• US Government Resource · cisa.gov