CVE-2019-0797

A flaw in Windows' Win32k component allows an attacker with local access to gain higher privileges on the system. The component incorrectly manages certain objects in memory, which can be exploited to escalate from a regular user to administrator level.

Win32k fails to properly validate or handle certain object references in memory, enabling a local attacker to trigger a use-after-free or similar memory corruption condition. Successful exploitation requires local code execution capability and results in privilege escalation to SYSTEM or Administrator context.