CVE-2019-0803
HIGH KEV RANSOMWAREWindows - Privilege Escalation in Win32k Component
Title source: llmExploitation Summary
CVE-2019-0803 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021, with confirmed use in ransomware campaigns. EIP tracks 4 public exploits from researchers including Arch-Vile, ExpLife0011, Iamgublin.
AI-analyzed exploit summary The provided content lacks actual exploit code and instead references an external download link, which is a common tactic for suspicious repositories. It mentions a related GitHub repository but does not include functional PoC code for CVE-2019-0803.
Description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.
Exploits (4)
The provided content lacks actual exploit code and instead references an external download link, which is a common tactic for suspicious repositories. It mentions a related GitHub repository but does not include functional PoC code for CVE-2019-0803.
This repository contains a proof-of-concept exploit for CVE-2019-0803, a Win32k elevation of privilege vulnerability. The exploit leverages DDE (Dynamic Data Exchange) and hijacks the ClientCopyDDEIn1 function to achieve privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2019-0803, a Win32k elevation of privilege vulnerability. The exploit leverages DDE (Dynamic Data Exchange) and hijacks the ClientCopyDDEIn1 function to achieve privilege escalation.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H