CVE-2019-1322KEV · OVERDUE

Microsoft Windows Privilege Escalation Vulnerability

High · published October 10, 2019

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 97.3th percentile for exploit probability.

1662
days past CISA
deadline
CVSS v3.1
7.8
EPSS
19%
Percentile
97.3
In the wild
Confirmed
What it is

🚨 A simple mismanagement of authentication requests makes this Windows vulnerability an open door for sneaky attackers! ⚡ Think of it like a hotel that forgets to check the identity of guests checking in. A clever intruder could easily sneak in as if they belong, bypassing the front desk entirely! Once inside, an attacker could gain elevated privileges, doing anything from accessing sensitive data to executing malicious code — it's like giving someone the keys to the whole building! This could lead to absolute chaos for users and organizations alike.

Put simply

Think of it like a hotel that forgets to check the identity of guests checking in. A clever intruder could easily sneak in as if they belong, bypassing the front desk entirely! CVE-2019-1322 is an elevation of privilege vulnerability in Windows due to improper handling of authentication requests. This flaw allows attackers to exploit this oversight and gain unauthorized access to system resources.

What to do

Once inside, an attacker could gain elevated privileges, doing anything from accessing sensitive data to executing malicious code — it's like giving someone the keys to the whole building! This could lead to absolute chaos for users and organizations alike. Immediately apply the security update released by Microsoft to close this vulnerability. Additionally, ensure your authentication processes are robust and monitor access logs for any suspicious activity. You're a security hero! By tackling this issue, you're making the digital world a safer place. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.19205 · 97.3th percentile
Published
2019-10-10T13:28Z
KEV added
2022-03-15 · due 2022-04-05
EPSS history
Timeline
  • 15 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 5
    kev
  • 10 OCT 13:28Z
    An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege…
    cvelistv5