CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2019-14587.8/HIGHEPSS 74.4%CISA KEV
2019-12-10

Windows Win32k Kernel Memory Handling Local Privilege Escalation Vulnerability (CVE-2019-1458) Analysis and Mitigation Guide

[Affected Scope] Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k subsystem

[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), completely bypassing security controls and compromising the host

[Mitigation] Immediately apply the official Microsoft cumulative security updates (KB) and restrict unauthorized local executable execution

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse