What’s Vulnerable › Vulnerabilities
CVE-2019-0999
- Severity: high (CVSS 7.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-07-15 · updated 2026-06-17
Description
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.
Affected products
- Microsoft Windows 10 Version 1607: 1607, 1703, 1709, 1803
- Microsoft Windows Server 2016: 1803
- Microsoft Corporation Windows: 10 for 32-bit Systems, 10 for x64-based Systems, 10 Version 1607 for 32-bit Systems, 10 Version 1607 for x64-based Systems, 10 Version 1703 for 32-bit Systems, 10 Version 1703 for x64-based Systems (+6)
- Microsoft Windows Server: 2016, 2016 (Core installation), version 1803 (Core Installation)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0999
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0999
Get alerted when CVE-2019-0999 or the next vulnerability affects your stack