CVE-2019-1132

A privilege escalation vulnerability in Windows Win32k was actively exploited in the wild, allowing attackers to escalate privileges without remote code execution.

Microsoft's Win32k component failed to properly handle memory objects, enabling local privilege escalation. DIB organizations must ensure all Windows systems are patched, as this vulnerability was actively exploited in the wild and remains a high-severity threat. Failure to patch exposes systems to unauthorized access and potential data breaches.

Shame score — A known privilege escalation vulnerability in a core Windows component was actively exploited in the wild, indicating negligent patching and a failure to protect critical infrastructure.