Skip to content
COOEY

EXPOSURES › CVE-2019-0803

CVE-2019-0803

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-0803 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 78/100 exploited-in-wildunpatchedprivilege-escalationrce

Microsoft Win32k privilege escalation vulnerability allows kernel-mode code execution via improper memory handling.

This CVE-2019-0803 in Microsoft Win32k enables attackers to escalate privileges and execute arbitrary code in kernel mode by exploiting improper memory object handling. DIB organizations must ensure all Windows systems are patched, as this vulnerability was actively exploited in the wild and represents a severe, avoidable risk if unpatched.

Shame score — A high-severity, actively exploited privilege escalation vulnerability in a core Windows component that was not patched before widespread exploitation, reflecting significant negligence in patch management and system hardening.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
widely condemned
cooey ↗ severe-fallout -0.70
widely condemned
"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode."
app.opencve.io ↗ severe-fallout -0.70
widely condemned
"Microsoft CVEs and Security Vulnerabilities - OpenCVE"
www.cvefind.com ↗ severe-fallout -0.70
widely condemned
"Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find"
www.hipaajournal.com ↗ severe-fallout -0.70
widely condemned
"Patients Warned About AnMed Communications After Cyberattack Closes 83 Facilities"
xposedornot.com ↗ severe-fallout -0.70
widely condemned
"Data Breach Directory & Database: Browse 760+ Known Breaches - XposedOrNot"
watchtowr.com ↗ severe-fallout -0.70
widely condemned
"watchTowr | Preemptive Exposure Management for AI-Driven Attack Timelines"
AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized