CVE-2019-0803: high-severity vulnerability in Microsoft Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA, has a public proof of concept and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply updates per vendor instructions.
Windows Win32k component fails to properly manage memory objects, allowing an attacker with local access to gain higher system privileges. This is a serious flaw because it lets someone take control of your computer.
Win32k memory object handling vulnerability enabling privilege escalation from local user context to SYSTEM or higher. Requires local code execution as a prerequisite; no network vector. Impact includes complete system compromise and unauthorized access to sensitive data and kernel-level resources.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.