CVE-2019-1164

CVE-2019-1164 is an elevation of privilege vulnerability in the Windows kernel affecting multiple versions of Microsoft Windows and Windows Server. It allows an authenticated attacker to execute arbitrary code in kernel mode by running a specially crafted application, potentially leading to full system compromise. With a CVSS score of 7.8 (High), this vulnerability requires local access and has low attack complexity, enabling an attacker to install programs, modify data, or create new accounts. While no public exploit code is currently available in Metasploit, Nuclei, or ExploitDB, and it is not listed in CISA's KEV catalog, it received some media coverage and community discussion at the time of its disclosure.