Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-07-10. Apply updates per vendor instructions.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 8 products
4/ CVE-2019-1458 exploited by APT33 shows the need for real-time memory analysis to detect privilege escalation in memory. #MalwareAnalysis #Security
Post summary
The post reports that CVE-2019-1458 was actively exploited by APT33, emphasizing the need for real‑time memory analysis to catch privilege‑escalation vulnerabilities.
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1507 | - | - | x64 |
| OS | microsoft | windows_10_1507 | - | - | x86 |
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_7 | - | - | - |
| OS | microsoft | windows_8.1 | - | - | - |
| OS | microsoft | windows_rt_8.1 | - | - | - |
| OS | microsoft | windows_server_2008 | - | - | itanium |
| OS | microsoft | windows_server_2008 | r2 | - | itanium |
| OS | microsoft | windows_server_2008 | r2 | - | x86 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |