CVE-2019-1322: Microsoft Windows vulnerability

1. In CISA KEVCISA KEV catalogue15 Mar 2022
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.

• Microsoft · Windows10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems
• Microsoft · Windows Serverversion 1803 (Core Installation); 2019; 2019 (Core installation)
• Microsoft · Windows 10 Version 1903 for 32-bit SystemsVersions not stated
• Microsoft · Windows 10 Version 1903 for x64-based SystemsVersions not stated
• Microsoft · Windows 10 Version 1903 for ARM64-based SystemsVersions not stated
• Microsoft · Windows Server, version 1903 (Server Core installation)Versions not stated

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 15 Mar 2022 · known ransomware use · catalogue entry

Public check

No public nuclei template

Vendor

Microsoft

Published

October 2019

Band

Exploited in the wild, October 2019

1. 5 Nov
   CISA’s KEV entry now notes known ransomware use CISA
2. 15 Mar 2022
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com
• packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilpacketstormsecurity.com