EXPOSURES › CVE-2019-0803
CVE-2019-0803
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Win32k privilege escalation vulnerability allows kernel-mode code execution via improper memory handling.
This CVE-2019-0803 in Microsoft Win32k enables attackers to escalate privileges and execute arbitrary code in kernel mode by exploiting improper memory object handling. DIB organizations must ensure all Windows systems are patched, as this vulnerability was actively exploited in the wild and represents a severe, avoidable risk if unpatched.
Shame score — A high-severity, actively exploited privilege escalation vulnerability in a core Windows component that was not patched before widespread exploitation, reflecting significant negligence in patch management and system hardening.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode."
"Microsoft CVEs and Security Vulnerabilities - OpenCVE"
"Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find"
"Patients Warned About AnMed Communications After Cyberattack Closes 83 Facilities"
"Data Breach Directory & Database: Browse 760+ Known Breaches - XposedOrNot"
"watchTowr | Preemptive Exposure Management for AI-Driven Attack Timelines"
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |