VDB

CVE-2019-0803

CVE-2019-0803 PUBLISHED KEV CVSS 7.199999809265137 HIGH

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.

EPSS 88.84% · 99.5th percentile

Risk Scores

CVSS 2.0
7.199999809265137
EPSS Score
88.84%
99.5th percentile

Affected Products

VendorProductVersions
microsoftwindows_10_1709
microsoftwindows_server_2008r2, r2, r2
microsoftwindows_server_1709
microsoftwindows_10_1507
microsoftwindows_8.1
microsoftwindows_10_1809
microsoftwindows_7
microsoftwindows_10_1703
microsoftwindows_server_2012r2, r2, r2
microsoftwindows_rt_8.1
microsoftwindows_server_2019
microsoftwindows_10_1803
MicrosoftWindows Server2008 for x64-based Systems Service Pack 2 (Core installation), 2008 for x64-based Systems Service Pack 2, 2008 for 32-bit Systems Service Pack 2
MicrosoftWindows7 for 32-bit Systems Service Pack 1, *, *
microsoftwindows_10_1607
microsoftwindows_server_2016
microsoftwindows_server_1803

Timeline

  • Jan 19, 1970 VulnCheck XDB Entry
  • Jan 19, 1970 VulnCheck XDB Entry
  • May 23, 2014 PoC Published
  • Apr 9, 2019 VulnCheck KEV Exploitation
  • Apr 9, 2019 PoC Published
  • Apr 9, 2019 CVE Published
  • Apr 10, 2019 PoC Published
  • May 24, 2019 PoC Published
  • Jul 18, 2019 PoC Published
  • Jan 21, 2020 PoC Published
  • Jun 26, 2020 PoC Published
  • Aug 17, 2020 PoC Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›