CVE-2019-0805

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.

• CWE-345

• http://packetstormsecurity.com/files/152537/Microsoft-Windows-LUAFV-Delayed-Virtualization-Cache-Manager-Poisoning-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0805Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/46717/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/152537/Microsoft-Windows-LUAFV-Delayed-Virtualization-Cache-Manager-Poisoning-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0805Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/46717/Exploit, Third Party Advisory, VDB Entry

Published

Apr 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0799Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0800Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0801A remote code execution vulnerability exists when Microsoft …
• CVE-2019-0802An information disclosure vulnerability exists when the Wind…
• CVE-2019-0803An elevation of privilege vulnerability exists in Windows wh…7.8
• CVE-2019-0804An information disclosure vulnerability exists in the way Az…
• CVE-2019-0806A remote code execution vulnerability exists in the way that…
• CVE-2019-0807Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-0808An elevation of privilege vulnerability exists in Windows wh…7.8
• CVE-2019-0809A remote code execution vulnerability exists when the Visual…
• CVE-2019-0810A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-0811A denial of service vulnerability exists in Windows DNS Serv…