CVE-2019-1458

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

Published: 2019-12-10

Vulnerable Products

• Windows Server 2016
• Windows 10
• Windows 7
• Windows 8.1
• Windows Rt 8.1
• Windows Server 2008
• Windows Server 2012

Community Advisory

Improve Advisory

CVE-2019-1458 Exploits (5)

• piotrflorczyk/cve-2019-1458_POC ( 130)
• unamer/CVE-2019-1458 ( 100)
• DreamoneOnly/CVE-2019-1458-malware
• Eternit7/CVE-2019-1458
• rapid7/metasploit-framework/modules/exploits/windows/local/cve_2019_1458_wizardopium.rb

Official CVE References

View references (3)

• packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html
• packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html
• msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458