CVE-2019-1132

CVE Database · CVE-2019-1132

CVE-2019-1132

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

9.79%

Published

Jul 15, 2019

Modified

Oct 29, 2025

CISA Known Exploited Vulnerability

Added: 2022-03-15 · Due: 2022-04-05

Apply updates per vendor instructions.

Public PoC / Exploit (4)

All weaponized →

Exploit-DBMicrosoft Windows 7 build 7601 (x86) - Local Privilege Escalation TrickestTrickest PoC index GitHub PoCVlad-tri/CVE-2019-1132★61 GitHub PoCpetercc/CVE-2019-1132★3

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products (4)

microsoft · windows_7vulnerable

microsoft · windows_server_2008vulnerable

References (3)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1132

PatchVendor Advisory

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1132

PatchVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1132

US Government Resource

KEV Catalog EPSS Scores Vendors All CVEs