CVE-2019-1388: Microsoft Windows vulnerability

1. In CISA KEVCISA KEV catalogue7 Apr 2023
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.

• Microsoft · Windows7 for 32-bit Systems Service Pack 1; 7 for x64-based Systems Service Pack 1; 8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems and 12 more
• Microsoft · Windows Server2008 R2 for x64-based Systems Service Pack 1 (Core installa…; 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation) and 11 more
• Microsoft · Windows 10 Version 1903 for 32-bit SystemsVersions not stated
• Microsoft · Windows 10 Version 1903 for x64-based SystemsVersions not stated
• Microsoft · Windows 10 Version 1903 for ARM64-based SystemsVersions not stated
• Microsoft · Windows Server, version 1903 (Server Core installation)Versions not stated

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 7 Apr 2023 · known ransomware use · catalogue entry

Public check

No public nuclei template

Weakness

Improper Privilege Management · Access Control

Vendor

Microsoft

Published

November 2019

Band

Exploited in the wild, November 2019

1. 5 Nov
   CISA’s KEV entry now notes known ransomware use CISA
2. 7 Apr 2023
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Weakness CWE-269cwe.mitre.org
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com
• zerodayinitiative.com/advisories/ZDI-19-975zerodayinitiative.com