CVE-2019-0543: Microsoft Windows vulnerability

1. In CISA KEVCISA KEV catalogue15 Mar 2022
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 15 Mar 2022 · known ransomware use · catalogue entry

Public check

No public nuclei template

Weakness

Improper Authentication · Authentication

Vendor

Microsoft

Published

January 2019

Band

Exploited in the wild, January 2019

1. 5 Nov
   CISA’s KEV entry now notes known ransomware use CISA
2. 15 Mar 2022
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Weakness CWE-287cwe.mitre.org
• securityfocus.com/bid/106408securityfocus.com
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com
• Exploitexploit-db.com