Actively exploited in the wild

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft - Win32k · Listed in the CISA KEV since 2022-01-10. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2019-1458

HighCVSS 7.8KEV

Published: 10/12/2019(UTC)Updated: 12/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

73.86%

99th percentile - higher than 99% of all known CVEs

Summary

A vulnerability in Windows when the Win32k component fails to properly handle objects in memory allows elevation of privilege.

Risk Assessment

Potential for privilege escalation and system compromise.

Recommendation

Apply security patches from the vendor.

Original NVD description (English source)

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.