CVE-2019-0859

CVE-2019-0859 is an elevation of privilege vulnerability in the Windows Win32k component, allowing an attacker to gain full control over a vulnerable system. This high-severity flaw (CVSS 7.8) requires local access and low privileges, but no user interaction. It has been actively exploited in the wild, as confirmed by its inclusion in CISA's KEV catalog. Despite no public exploit code on platforms like Metasploit or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, indicating its importance.