CVE-2019-1322 — Microsoft Windows Privilege Escalation Vulnerability
CVE-2019-1322: Microsoft Windows Privilege Escalation Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Windows |
| Date added | 2022-03-15 |
| Due date | 2022-04-05 |
| Ransomware campaign use | Known |
Description
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-1322
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-1322
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog