Description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Windows
10 for 32-bit Systemsaffected10 for x64-based Systemsaffected10 Version 1607 for 32-bit Systemsaffected10 Version 1607 for x64-based Systemsaffected7 for 32-bit Systems Service Pack 1affected7 for x64-based Systems Service Pack 1affected8.1 for 32-bit systemsaffected8.1 for x64-based systemsaffectedRT 8.1affected
Microsoft Windows Server
2016affected2016 (Core installation)affected2008 for 32-bit Systems Service Pack 2affected2008 for 32-bit Systems Service Pack 2 (Core installation)affected2008 for Itanium-Based Systems Service Pack 2affected2008 for x64-based Systems Service Pack 2affected2008 for x64-based Systems Service Pack 2 (Core installation)affected2008 R2 for Itanium-Based Systems Service Pack 1affected2008 R2 for x64-based Systems Service Pack 1affected2008 R2 for x64-based Systems Service Pack 1 (Core installation)affected2012affected2012 (Core installation)affected2012 R2affected2012 R2 (Core installation)affected
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458 ↗
- http://packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html ↗
- http://packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1458 ↗