CVE-2019-0808
HIGH KEVWindows - Privilege Escalation
Title source: llmDescription
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.
Exploits (7)
metasploit
WORKING POC
NORMAL
by Clément Lecigne, Grant Willcox, timwr · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ntusermndragover.rb
References (3)
Scores
CVSS v3
7.8
EPSS
0.7395
EPSS Percentile
98.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2019-03-12
InTheWild.io
2019-03-12
ENISA EUVD
EUVD-2019-1563
Status
published
Products (3)
microsoft/windows_7
microsoft/windows_server_2008
microsoft/windows_server_2008
r2 sp1
Published
Apr 09, 2019
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026