Buffer overflow in Microsoft Windows and Windows Server - CVE-2019-1458
Published: December 10, 2019 / Updated: November 20, 2020
Vulnerability identifier: #VU23486
CSH Severity: Medium
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-1458
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error when processing objects in memory within the Win32k component. A local user can create a malicious application, launch it on the system and execute arbitrary code with SYSTEM privileges.
Note, this vulnerability is being actively exploited in the wild.
Affected software
Microsoft Windows
Windows Server
Windows Server
How to mitigate CVE-2019-1458
Install update from vendor's website.
Links to Public Exploits and PoC-codes
- Exploit #4708 - Microsoft Windows Uninitialized Variable Local Privilege Escalation (October 15, 2020)
- Exploit #4707 - Microsoft Windows Uninitialized Variable Local Privilege Elevation (October 15, 2020)
- Exploit #2797 - WindowsExploitationResources (Resources pertaining to advanced Windows exploit development and semi-related topics) (June 2, 2020)
- Exploit #272 - CVE-2019-1458 (CVE-2019-1458 Windows LPE Exploit) (March 18, 2020)