CVE-2019-0859
HIGH KEV RANSOMWAREWindows - Privilege Escalation
Title source: llmDescription
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.
Exploits (1)
nomisec
WORKING POC
120 stars
by Sheisback · local
https://github.com/Sheisback/CVE-2019-0859-1day-Exploit
Scores
CVSS v3
7.8
EPSS
0.1064
EPSS Percentile
93.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2019-03-17
InTheWild.io
2019-03-17
ENISA EUVD
EUVD-2019-1610
Ransomware Use
Confirmed
Status
published
Products (17)
microsoft/windows_10_1507
(2 CPE variants)
microsoft/windows_10_1607
(2 CPE variants)
microsoft/windows_10_1703
(2 CPE variants)
microsoft/windows_10_1709
(3 CPE variants)
microsoft/windows_10_1803
(3 CPE variants)
microsoft/windows_10_1809
(3 CPE variants)
microsoft/windows_7
microsoft/windows_8.1
microsoft/windows_rt_8.1
microsoft/windows_server_1709
... and 7 more
Published
Apr 09, 2019
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026