Unrated severityCISA KEVNVD Advisory· Published Apr 9, 2019· Updated Oct 21, 2025

CVE-2019-0808

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windowsllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 7 for 32-bit Systems Service Pack 1
Microsoft/Windows Server 2003cpe-rescue
Range: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/157616/Microsoft-Windows-NtUserMNDragOver-Local-Privilege-Escalation.htmlmitrex_refsource_MISC
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.043
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000