High severity7.8CISA KEVNVD Advisory· Published Apr 9, 2019· Updated Jun 17, 2026

CVE-2019-0808

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windowsv52 versions
7 for 32-bit Systems Service Pack 1+ 1 more
- (no CPE)range: 7 for 32-bit Systems Service Pack 1
- (no CPE)
Microsoft/Windows Server 2003cpe-rescue
Range: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)
Microsoft/Windows 7
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
Microsoft/Windows Server 20082 versions
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808nvdPatchVendor Advisory
packetstormsecurity.com/files/157616/Microsoft-Windows-NtUserMNDragOver-Local-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.042
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000