EXPOSURES › CVE-2019-0808
CVE-2019-0808
HIGH ⌖ ON CISA KEV · EXPLOITEDA kernel-mode privilege escalation flaw in Microsoft Win32k allowed attackers to execute arbitrary code with system privileges.
This vulnerability in the Windows kernel allowed attackers to escalate privileges and execute code in kernel mode, posing a severe risk to systems relying on Windows for secure operations. DIB organizations must ensure all Windows systems are patched against this known exploit, as it was actively exploited in the wild and linked to ransomware campaigns. Failure to patch exposes critical infrastructure to unauthorized access and potential data breaches.
Shame score — A critical kernel vulnerability was actively exploited in the wild and linked to ransomware, demonstrating severe negligence in patch management and system hardening.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.
"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode."
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |