CVE-2019-0732 — A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'

Back Back to CVE browser

HIGH

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'

Published Apr 9, 2019

7.8

HIGH

CVSS 3.0

EPSS 3.78%

Description

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.

Affected products

Vendor Microsoft Product Windows Default
n/a
- Version
  10 Version 1607 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1607 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1703 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1703 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  7 for 32-bit Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  7 for x64-based Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  8.1 for 32-bit systems
  Status
  affected
  Constraints
  -
- Version
  8.1 for x64-based systems
  Status
  affected
  Constraints
  -
- Version
  RT 8.1
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server Default
n/a
- Version
  2008 R2 for Itanium-Based Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  2008 R2 for x64-based Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  2008 R2 for x64-based Systems Service Pack 1 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2008 for 32-bit Systems Service Pack 2
  Status
  affected
  Constraints
  -
- Version
  2008 for 32-bit Systems Service Pack 2 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2008 for Itanium-Based Systems Service Pack 2
  Status
  affected
  Constraints
  -
- Version
  2008 for x64-based Systems Service Pack 2
  Status
  affected
  Constraints
  -
- Version
  2008 for x64-based Systems Service Pack 2 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2012
  Status
  affected
  Constraints
  -
- Version
  2012 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2012 R2
  Status
  affected
  Constraints
  -
- Version
  2012 R2 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2016
  Status
  affected
  Constraints
  -
- Version
  2016 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2019
  Status
  affected
  Constraints
  -
- Version
  2019 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  version 1709 (Core Installation)
  Status
  affected
  Constraints
  -
- Version
  version 1803 (Core Installation)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows

n/a

Version	Status	Constraints
10 Version 1607 for 32-bit Systems	affected	-
10 Version 1607 for x64-based Systems	affected	-
10 Version 1703 for 32-bit Systems	affected	-
10 Version 1703 for x64-based Systems	affected	-
10 Version 1709 for 32-bit Systems	affected	-
10 Version 1709 for ARM64-based Systems	affected	-
10 Version 1709 for x64-based Systems	affected	-
10 Version 1803 for 32-bit Systems	affected	-
10 Version 1803 for ARM64-based Systems	affected	-
10 Version 1803 for x64-based Systems	affected	-
10 Version 1809 for 32-bit Systems	affected	-
10 Version 1809 for ARM64-based Systems	affected	-
10 Version 1809 for x64-based Systems	affected	-
10 for 32-bit Systems	affected	-
10 for x64-based Systems	affected	-
7 for 32-bit Systems Service Pack 1	affected	-
7 for x64-based Systems Service Pack 1	affected	-
8.1 for 32-bit systems	affected	-
8.1 for x64-based systems	affected	-
RT 8.1	affected	-

Microsoft

Windows Server

n/a

Version	Status	Constraints
2008 R2 for Itanium-Based Systems Service Pack 1	affected	-
2008 R2 for x64-based Systems Service Pack 1	affected	-
2008 R2 for x64-based Systems Service Pack 1 (Core installation)	affected	-
2008 for 32-bit Systems Service Pack 2	affected	-
2008 for 32-bit Systems Service Pack 2 (Core installation)	affected	-
2008 for Itanium-Based Systems Service Pack 2	affected	-
2008 for x64-based Systems Service Pack 2	affected	-
2008 for x64-based Systems Service Pack 2 (Core installation)	affected	-
2012	affected	-
2012 (Core installation)	affected	-
2012 R2	affected	-
2012 R2 (Core installation)	affected	-
2016	affected	-
2016 (Core installation)	affected	-
2019	affected	-
2019 (Core installation)	affected	-
version 1709 (Core Installation)	affected	-
version 1803 (Core Installation)	affected	-

Remediation

No remediation recorded yet.

Metrics

3.78% 0.03776

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03776

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (33 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.78% (0.03776)	89.60th	v5 (v2026.06.15)
Sep 22, 2026	3.78% (0.03776)	89.46th	v5 (v2026.06.15)
Sep 21, 2026	5.17% (0.05166)	92.09th	v5 (v2026.06.15)
Sep 6, 2026	3.78% (0.03776)	89.23th	v5 (v2026.06.15)
Sep 5, 2026	5.17% (0.05166)	91.92th	v5 (v2026.06.15)
Aug 30, 2026	3.78% (0.03776)	89.17th	v5 (v2026.06.15)
Aug 28, 2026	5.17% (0.05166)	91.88th	v5 (v2026.06.15)
Aug 24, 2026	3.78% (0.03776)	89.10th	v5 (v2026.06.15)
Aug 23, 2026	5.17% (0.05166)	91.84th	v5 (v2026.06.15)
Jun 15, 2026	3.78% (0.03776)	88.51th	v5 (v2026.06.15)
Mar 17, 2026	1.40% (0.01395)	80.21th	v4 (v2025.03.14)
Nov 21, 2025	4.19% (0.04188)	88.23th	v4 (v2025.03.14)
Nov 18, 2025	0.32% (0.00321)	52.17th	v4 (v2025.03.14)
Sep 25, 2025	4.19% (0.04188)	88.26th	v4 (v2025.03.14)
Mar 30, 2025	1.23% (0.01235)	77.36th	v4 (v2025.03.14)
Mar 29, 2025	8.28% (0.08282)	86.82th	v4 (v2025.03.14)
Mar 17, 2025	3.43% (0.03432)	86.67th	v4 (v2025.03.14)
Feb 16, 2025	72.07% (0.72066)	98.31th	v3 (v2023.03.01)
Jan 22, 2025	66.01% (0.66012)	98.11th	v3 (v2023.03.01)
Dec 17, 2024	71.72% (0.71719)	98.25th	v3 (v2023.03.01)
Apr 2, 2024	0.16% (0.00161)	51.88th	v3 (v2023.03.01)
Jan 8, 2024	0.14% (0.00144)	50.09th	v3 (v2023.03.01)
Jun 4, 2023	0.15% (0.00153)	50.31th	v3 (v2023.03.01)
Apr 2, 2023	0.16% (0.00159)	50.86th	v3 (v2023.03.01)
Mar 16, 2023	0.21% (0.00205)	56.74th	v3 (v2023.03.01)
Mar 7, 2023	0.16% (0.00158)	50.48th	v3 (v2023.03.01)
Mar 6, 2023	1.91% (0.01909)	77.43th	v2 (v2022.01.01)
Mar 4, 2023	1.91% (0.01909)	77.42th	v2 (v2022.01.01)
Apr 1, 2022	1.91% (0.01909)	75.42th	v2 (v2022.01.01)
Feb 4, 2022	1.91% (0.01909)	54.58th	v2 (v2022.01.01)
Feb 3, 2022	30.10% (0.30098)	96.74th	v1
Sep 1, 2021	30.10% (0.30098)	98.51th	v1
Apr 14, 2021	30.10% (0.30098)	0.00th	v1

Weaknesses (1)

CWE-863

Incorrect Authorization

References (3)

http://packetstormsecurity.com/files/152536/Microsoft-Windows-LUAFV-NtSetCachedSigningLevel-Device-Guard-Bypass.html
x_refsource_MISCThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0732
x_refsource_MISCPatchVendor Advisory
https://www.exploit-db.com/exploits/46716/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://packetstormsecurity.com/files/152536/Microsoft-Windows-LUAFV-NtSetCachedSigningLevel-Device-Guard-Bypass.html		x_refsource_MISCThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0732		x_refsource_MISCPatchVendor Advisory
https://www.exploit-db.com/exploits/46716/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Apr 9, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0732

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0732

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0732