CISA Known Exploited Vulnerability

CVE-2019-1458 Ransomware

Microsoft · Win32k

Microsoft Win32k Privilege Escalation Vulnerability

Date added 2022-01-10

BOD 22-01 due date 2022-07-10

CWE —

Ransomware Known

CISA description

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.

Apply updates per vendor instructions.

Vulnerability data triggers these controls during assessment and continuous monitoring.