ZeroDay Findings
Sign inSign up

Findings

CVE-2019-1132

Microsoft Win32k Privilege Escalation Vulnerability

Published Jul 15, 2019 · updated Jun 16, 2026 · microsoft windows 7

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 15, 2019 · Catalog

    Detected

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

  2. Mar 15, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 5, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

Required action

Apply updates per vendor instructions.

CISA due date Apr 5, 2022

Affected

  • cpe microsoft/windows 7version unspecified
  • cpe microsoft/windows server 2008version unspecified
  • cpe microsoft/windows server 2008r2
  • vendor Microsoft Win32kversion unspecified

Sources

  • CISA KEVCVE-2019-1132

    A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

    cisa.gov
  • CVE.orgCVE-2019-1132

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-1132

    30-day exploitation probability 9.9%

    first.org
  • Exploit Database47176

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2019-1132

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

    nvd.nist.gov

References