7.8

CVE-2019-1322

Warning
Exploit

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.

Data is provided by the National Vulnerability Database (NVD)
MicrosoftWindows 10 1803 Version- HwPlatformarm64
MicrosoftWindows 10 1803 Version- HwPlatformx64
MicrosoftWindows 10 1803 Version- HwPlatformx86
MicrosoftWindows 10 1809 Version- HwPlatformarm64
MicrosoftWindows 10 1809 Version- HwPlatformx64
MicrosoftWindows 10 1809 Version- HwPlatformx86
MicrosoftWindows 10 1903 Version- HwPlatformarm64
MicrosoftWindows 10 1903 Version- HwPlatformx64
MicrosoftWindows 10 1903 Version- HwPlatformx86
MicrosoftWindows Server 1803 Version- HwPlatformx64
MicrosoftWindows Server 1903 Version- HwPlatformx64

15.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 34.97% 0.969
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H