Microsoft Win32k Privilege Escalation Vulnerability

Timeline

Detection, updates, and resolution for this record.

1. Apr 9, 2019 · Catalog

   Detected

   An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.

Affected

• cpe microsoft/windows 10 1507version unspecified
• cpe microsoft/windows 10 1607version unspecified
• cpe microsoft/windows 10 1703version unspecified
• cpe microsoft/windows 10 1709version unspecified
• vendor Microsoft Win32kversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2019-0859

  Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

  cisa.gov
• CVE.orgVulnerability recordCVE-2019-0859

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2019-0859

  30-day exploitation probability 4.2%

  first.org
• NIST NVDVulnerability recordCVE-2019-0859

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Patch · portal.msrc.microsoft.com
• US Government Resource · cisa.gov