High severity7.8NVD Advisory· Published Apr 9, 2019· Updated Jun 17, 2026

CVE-2019-0836

Description

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windowsllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 7 for 32-bit Systems Service Pack 1
Microsoft/Windows Server 2003cpe-rescue
Range: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0836nvdPatchVendor Advisory
www.exploit-db.com/exploits/46718/nvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/152538/Microsoft-Windows-LUAFV-PostLuafvPostReadWrite-SECTION_OBJECT_POINTERS-Race-Condition.htmlnvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/107719nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000