coldbraid

CVE-2019-0797 Microsoft Win32k

Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

CVSS
not scored

On CISA’s exploited list

Microsoft Win32k Privilege Escalation Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known