7.8

CVE-2019-0880

Warning

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

Data is provided by the National Vulnerability Database (NVD)
MicrosoftWindows 10 1507 Version- HwPlatformx64
MicrosoftWindows 10 1507 Version- HwPlatformx86
MicrosoftWindows 10 1607 Version- HwPlatformx64
MicrosoftWindows 10 1607 Version- HwPlatformx86
MicrosoftWindows 10 1703 Version- HwPlatformx64
MicrosoftWindows 10 1703 Version- HwPlatformx86
MicrosoftWindows 10 1709 Version- HwPlatformarm64
MicrosoftWindows 10 1709 Version- HwPlatformx64
MicrosoftWindows 10 1709 Version- HwPlatformx86
MicrosoftWindows 10 1803 Version- HwPlatformarm64
MicrosoftWindows 10 1803 Version- HwPlatformx64
MicrosoftWindows 10 1803 Version- HwPlatformx86
MicrosoftWindows 10 1809 Version- HwPlatformarm64
MicrosoftWindows 10 1809 Version- HwPlatformx64
MicrosoftWindows 10 1809 Version- HwPlatformx86
MicrosoftWindows 10 1903 Version- HwPlatformarm64
MicrosoftWindows 10 1903 Version- HwPlatformx64
MicrosoftWindows 10 1903 Version- HwPlatformx86
MicrosoftWindows 8.1 Version-
MicrosoftWindows Rt 8.1 Version-
MicrosoftWindows Server 1903 Version- HwPlatformx64

23.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Privilege Escalation Vulnerability

Vulnerability

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.37% 0.794
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H