Win32k Elevation of Privilege Vulnerability

🗓️ 09 Jul 2019 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 40 Views

Win32k Elevation of Privilege Vulnerability exists in Windows due to mishandling of memory objects allowing arbitrary code execution in kernel mode. Attackers can install programs, manipulate data, or create user accounts with full privileges. An attacker must log in to the system and run a crafted application to exploit the vulnerability

Reporter	Title	Published	Views	Family All 37
0day.today	Microsoft Windows 7 build 7601 (x86) - Local Privilege Escalation Exploit	28 Jul 201900:00	–	zdt
GithubExploit	Exploit for CVE-2019-1132	26 Jul 201906:51	–	githubexploit
ATTACKERKB	CVE-2019-1132	15 Jul 201900:00	–	attackerkb
ATTACKERKB	CVE-2019-1132	15 Jul 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode	23 Jul 201900:00	–	bdu_fstec
Circl	CVE-2019-1132	10 Jul 201904:00	–	circl
CISA KEV Catalog	Microsoft Win32k Privilege Escalation Vulnerability	15 Mar 202200:00	–	cisa_kev
CISA	CISA Adds 15 Known Exploited Vulnerability to Catalog	15 Mar 202200:00	–	cisa
CNVD	Microsoft win32k Privilege Vulnerability	10 Jul 201900:00	–	cnvd
Check Point Advisories	Microsoft Win32k Elevation of Privilege (CVE-2019-1132)	9 Jul 201900:00	–	checkpoint_advisories

Vulners

Node

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

09 Jul 2019 07:00Current

2.9Low risk

Vulners AI Score2.9

CVSS 27.2

CVSS 3.17.8

CVSS 37.8

EPSS0.09788

SSVC

win32k elevation of privilege windows memory mishandling arbitrary code execution kernel mode attacker user accounts system exploitation crafted application security update microsoft