CVE-2019-0808: Microsoft Win32k Privilege Escalation Vulnerability
First published: Tue Apr 09 2019(Updated: )
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Win32 Kernel Subsystem |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-0808?
CVE-2019-0808 has a severity rating of Important according to Microsoft's classification.
How can I fix CVE-2019-0808?
To fix CVE-2019-0808, install the latest security update provided by Microsoft for the affected Windows versions.
What platforms are affected by CVE-2019-0808?
CVE-2019-0808 affects Microsoft Windows 7 and Microsoft Windows Server 2008 with specific service packs.
What type of vulnerability is CVE-2019-0808?
CVE-2019-0808 is classified as an elevation of privilege vulnerability.
Can CVE-2019-0808 be exploited remotely?
CVE-2019-0808 requires local access to the system to exploit, so it is not a remote vulnerability.
- agent/type
- agent/description
- agent/remedy
- agent/title
- agent/severity
- agent/author
- agent/first-publish-date
- agent/references
- agent/source
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- vendor/microsoft
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2-sp1
- canonical/microsoft win32 kernel subsystem