CVE-2019-0797

A kernel-mode privilege escalation flaw in Microsoft Win32k allowed attackers to execute arbitrary code with system privileges.

This vulnerability in the Win32k component of Windows allowed attackers to escalate privileges and execute kernel-mode code by mishandling memory objects. DIB organizations must ensure all Windows systems are patched immediately, as this flaw was actively exploited in the wild and represents a severe, avoidable exposure to ransomware and data theft. The failure stems from Microsoft's delayed patching of a known, high-severity vulnerability that was later added to the CISA KEV catalog.

Shame score — A known, high-severity kernel vulnerability was left unpatched long enough to be actively exploited in the wild, demonstrating severe negligence in patch management and leaving critical infrastructure exposed to ransomware and data breaches.