CVE-2019-0859

A flaw in Windows' Win32k component allows an attacker with regular user access to gain administrator-level privileges by exploiting how the system handles memory objects. This is dangerous because it gives attackers full control over the computer.

An elevation of privilege vulnerability in the Win32k kernel component caused by improper memory object handling. A local attacker can exploit this to escalate from user-mode to kernel privileges, achieving full system compromise. The vulnerability requires local access but no user interaction beyond execution of a malicious payload.