KEV · Actively exploited
CVE-2019-1458
HIGH 7.8
KEV
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Attack vector : Local
No user interaction
Show raw CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
73.86%
exploit likely
percentile 99.4%
CISA Known Exploited Vulnerability
- Added to KEV
- 2022-01-10
- Remediation deadline
- 2022-07-10
- Required action
- Apply updates per vendor instructions.
- Ransomware
- Yes, known ransomware campaign
OS versions that fix this CVE
This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.
- Windows Server 2016 (Server Core installation) Fixed in —
- Windows Server 2016 Fixed in —
- Windows 10 1607 · 2016-07 Fixed in —