CVE-2019-0808

HIGH KEV

Windows - Privilege Escalation

Title source: llm

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.

Exploits (7)

exploitdb WORKING POC
by ze0r · textdoswindows
https://www.exploit-db.com/exploits/46604
nomisec WORKING POC 91 stars
by exodusintel · local
https://github.com/exodusintel/CVE-2019-0808
nomisec WORKING POC 48 stars
by ze0r · dos
https://github.com/ze0r/cve-2019-0808-poc
nomisec SUSPICIOUS 1 stars
by rakesh143 · poc
https://github.com/rakesh143/CVE-2019-0808
nomisec WORKING POC
by bb33bb · local
https://github.com/bb33bb/CVE-2019-0808-32-64-exp
metasploit WORKING POC NORMAL
by Clément Lecigne, Grant Willcox, timwr · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ntusermndragover.rb
patchapalooza WRITEUP
by Ascotbe · local
https://github.com/Ascotbe/Kernelhub

Scores

CVSS v3 7.8
EPSS 0.7395
EPSS Percentile 98.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2021-11-03
VulnCheck KEV 2019-03-12
InTheWild.io 2019-03-12
ENISA EUVD EUVD-2019-1563
Status published
Products (3)
microsoft/windows_7
microsoft/windows_server_2008
microsoft/windows_server_2008 r2 sp1
Published Apr 09, 2019
KEV Added Nov 03, 2021
Tracked Since Feb 18, 2026