Lucene search
HistoryApr 09, 2019 - 9:29 p.m.
CVE-2019-0859
windows
win32k
elevation of privilege
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0.004
Percentile
75.5%
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.
Affected configurations
Node
microsoftwindows_10Match-
ORmicrosoftwindows_10Match1607
ORmicrosoftwindows_10Match1703
ORmicrosoftwindows_10Match1709
ORmicrosoftwindows_10Match1803
ORmicrosoftwindows_10Match1809
ORmicrosoftwindows_7Match-sp1
ORmicrosoftwindows_8.1Match-
ORmicrosoftwindows_rt_8.1Match-
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2sp1itanium
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2016Match1709
ORmicrosoftwindows_server_2016Match1803
ORmicrosoftwindows_server_2019Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_10 | - | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* |
| microsoft | windows_10 | 1607 | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* |
| microsoft | windows_10 | 1703 | cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* |
| microsoft | windows_10 | 1709 | cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* |
| microsoft | windows_10 | 1803 | cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* |
| microsoft | windows_10 | 1809 | cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* |
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* |
| microsoft | windows_8.1 | - | cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* |
| microsoft | windows_rt_8.1 | - | cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2019-0685
2019-04-09 21:29:00
CVE-2019-0803
2019-04-09 21:29:01
cve
cve
attackerkb
attackerkb
cvelist
cvelist
prion
prion
Privilege escalation
2019-04-09 21:29:00
Privilege escalation
2019-04-09 21:29:00
Privilege escalation
2019-04-09 21:29:00
thn
thn
krebs
krebs
Patch Tuesday Lowdown, April 2019 Edition
2019-04-10 00:07:33
Patch Tuesday, December 2019 Edition
2019-12-11 01:51:25
checkpoint_advisories
checkpoint_advisories
Microsoft Win32k Elevation of Privilege (CVE-2019-0685)
2019-04-09 00:00:00
Microsoft Win32k Elevation of Privilege (CVE-2019-0859)
2019-04-09 00:00:00
Microsoft Windows GDI Elevation of Privilege (CVE-2019-0803)
2019-04-09 00:00:00
mscve
mscve
Win32k Elevation of Privilege Vulnerability
2019-04-09 07:00:00
Win32k Elevation of Privilege Vulnerability
2019-04-09 07:00:00
Win32k Elevation of Privilege Vulnerability
2019-04-09 07:00:00
symantec
symantec
canvas
canvas
Immunity Canvas: MENU_CONFUSION_LPE
2019-04-09 21:29:00
Immunity Canvas: DDE_CLOSEHANDLE_LPE
2019-04-09 21:29:00
cisa_kev
cisa_kev
Microsoft Win32k Privilege Escalation Vulnerability
2021-11-03 00:00:00
Microsoft Win32k Privilege Escalation Vulnerability
2021-11-03 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2019-06-07 04:37:34
qualysblog
qualysblog
exploitpack
exploitpack
Microsoft Windows - Win32k Local Privilege Escalation
2019-05-15 00:00:00
exploitdb
exploitdb
Microsoft Windows - 'Win32k' Local Privilege Escalation
2019-05-15 00:00:00
securelist
securelist
IT threat evolution Q2 2019
2019-08-19 10:00:29
New zero-day vulnerability CVE-2019-0859 in win32k.sys
2019-04-15 10:00:56
The zero-day exploits of Operation WizardOpium
2020-05-28 10:00:09
zdt
zdt
Microsoft Windows - Win32k Local Privilege Escalation Exploit
2019-05-24 00:00:00
myhack58
myhack58
threatpost
threatpost
A Brisk Private Trade in Zero-Days Widens Their Use
2020-04-06 21:05:06
New Microsoft Bug Bounty Program Looks To Squash The Next Spectre, Meltdown
2018-03-16 16:15:27
Windows Zero-Day Emerges in Active Exploits
2019-04-16 16:13:33
fireeye
fireeye
googleprojectzero
googleprojectzero
Detection Deficit: A Year in Review of 0-days Used In-The-Wild in 2019
2020-07-29 00:00:00
nessus
nessus
kaspersky
kaspersky
KLA11460 Multiple vulnerabilities in Microsoft Windows
2019-04-09 00:00:00
KLA11875 Multiple vulnerabilities in Microsoft Products (ESU)
2019-04-09 00:00:00
mskb
mskb
April 9, 2019—KB4493474 (OS Build 15063.1746)
2019-04-09 07:00:00
April 9, 2019—KB4493470 (OS Build 14393.2906)
2019-04-09 07:00:00
April 9, 2019—KB4493471 (Monthly Rollup)
2019-04-09 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4493470)
2019-04-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4493474)
2019-04-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4493509)
2019-04-10 00:00:00
talosblog
talosblog
ics
ics
Potential for China Cyber Response to Heightened U.S.–China Tensions
2020-10-20 12:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0.004
Percentile
75.5%
Related for NVD:CVE-2019-0859