CVE-2019-0797

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. The flaw, tracked as CVE-2019-0797, affects the Win32k kernel-mode driver and carries a CVSS 3.1 base score of 7.8 with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. It is distinct from the related Win32k issue CVE-2019-0808.

A local attacker with a low-privileged account can exploit the flaw to elevate privileges and obtain full control over the affected system, resulting in complete compromise of confidentiality, integrity, and availability. No user interaction or additional privileges beyond an initial local session are required for successful exploitation.

Microsoft has published security guidance addressing the issue at the referenced MSRC advisory, and the vulnerability appears in the CISA Known Exploited Vulnerabilities catalog, confirming observed in-the-wild exploitation.