Netskope Threat Labs

OS-WINDOWS Windows Kernel Registry Virtualization privilege escalation attempt

IPS-CFWIPS-SWG

1 SID: 50085

First seen
December 2023
Last seen
October 2026

Detects an attempt to exploit CVE-2019-0881, a privilege escalation flaw that can grant higher access in Windows Kernel Registry Virtualization.