{"id":"CVE-2019-1458","title":"An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.","summary":"An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"microsoft","product":"windows_10_1507","affected":["windows_10_1507","windows_10_1607","windows_7","windows_8.1","windows_rt_8.1","windows_server_2008","windows_server_2008 = r2","windows_server_2012","windows_server_2012 = r2","windows_server_2016"],"published":"2019-12-10","updated":"2026-08-12","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-1458","references":[{"url":"http://packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html","label":"secure@microsoft.com"},{"url":"http://packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html","label":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458","label":"secure@microsoft.com"},{"url":"http://packetstormsecurity.com/files/156651/Microsoft-Windows-WizardOpium-Local-Privilege-Escalation.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/159569/Microsoft-Windows-Uninitialized-Variable-Local-Privilege-Escalation.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1458","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"epss":0.74263,"epssPercentile":0.99479,"kev":true,"kevDateAdded":"2022-01-10","kevDueDate":"2022-07-10","kevRansomware":true,"exploited":true,"exploitAvailable":true,"zeroDay":true,"ingestedAt":"2026-08-12T05:52:07.325Z","exploits":{"exploitdb":true,"github":2,"githubRepos":["https://github.com/piotrflorczyk/cve-2019-1458_POC","https://github.com/rip1s/CVE-2019-1458"],"metasploit":["exploit/windows/local/cve_2019_1458_wizardopium"],"checkedAt":"2026-09-21T15:23:40.881Z"},"slug":"CVE-2019-1458","body":"## Overview\n\nAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.\n\n## Affected\n\n- `windows_10_1507`\n- `windows_10_1607`\n- `windows_7`\n- `windows_8.1`\n- `windows_rt_8.1`\n- `windows_server_2008`\n- `windows_server_2008 = r2`\n- `windows_server_2012`\n- `windows_server_2012 = r2`\n- `windows_server_2016`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":88,"depthScoreParts":{"impact":42.9,"likelihood":14.9,"exploitation":25,"ransomware":5},"changes":[]}