VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 9, 2019· Updated Jun 17, 2026

CVE-2019-0685

CVE-2019-0685

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859.

Affected products

12
  • Microsoft/Windows 10 19095 versions
    cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
  • Microsoft/Windows Server 20163 versions
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windowsv52 versions
    10 Version 1607 for 32-bit Systems+ 1 more
    • (no CPE)range: 10 Version 1607 for 32-bit Systems
    • (no CPE)
  • Microsoft/Windows Server 2003cpe-rescue
    Range: 2016

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.