7.8
High
Exploited
CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server | 2019 | No fix stated |
| Windows Server | 2016 | No fix stated |
| Windows Server | 2012 | No fix stated |
| Windows | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Windows Server
The 831 CVEs of Windows Server →
CVE-2020-1468
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its…
Not rated
CVE-2020-1463
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka…
Not rated
CVE-2020-1438
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects…
Not rated
CVE-2020-1436
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted…
Not rated