SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-1364

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

EXPLOIT ✓HIGH 7.8EPSS 2.88%

Does this matter?

A public exploit is published in Exploit-DB (verified) and the impact is high, while EPSS rates exploitation at 2.9%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use.

Description

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.

CVSS 3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
2.88% probability · 87th percentile
Public exploits
1 in Exploit-DB · verified · first 10 October 2019
CISA KEV
Not listed
Affected
microsoft/windows 7 · microsoft/windows server 2008
Source
secure@microsoft.com
EPSS trend
0%3%5%27 October 2026: 2.88%27 October 202627 October 2026

EPSS 2.9% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Public exploits (1)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-IDTitleTypePublishedVerified
EDB-47484source ↗Microsoft Windows Kernel - win32k.sys TTF Font Processing Pool Corruption in win32k!ulClearTypeFilterwindows · Google Security Researchdos10 October 2019yes

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.