CVE-2019-0731

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

• CWE-264

• http://packetstormsecurity.com/files/152534/Microsoft-Windows-LUAFV-Delayed-Virtualization-Cross-Process-Handle-Duplication-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0731Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/46714/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/152534/Microsoft-Windows-LUAFV-Delayed-Virtualization-Cross-Process-Handle-Duplication-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0731Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/46714/Exploit, Third Party Advisory, VDB Entry

Published

Apr 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0725A memory corruption vulnerability exists in the Windows Serv…
• CVE-2019-0726A memory corruption vulnerability exists in the Windows DHCP…
• CVE-2019-0727An elevation of privilege vulnerability exists when the Diag…
• CVE-2019-0728A remote code execution vulnerability exists in Visual Studi…
• CVE-2019-0729An Elevation of Privilege vulnerability exists in the way Az…
• CVE-2019-0730An elevation of privilege vulnerability exists when Windows …
• CVE-2019-0732A security feature bypass vulnerability exists in Windows wh…
• CVE-2019-0733A security feature bypass vulnerability exists in Windows De…
• CVE-2019-0734An elevation of privilege vulnerability exists in Microsoft …
• CVE-2019-0735An elevation of privilege vulnerability exists when the Wind…
• CVE-2019-0736A memory corruption vulnerability exists in the Windows DHCP…9.8
• CVE-2019-0737Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…