logo

CVE-2019-0880 - Microsoft Windows Privilege Escalation Vulnerability

Project:Microsoft

Product:Windows

Date Added:2022-05-23Due Date:2022-06-13

Vulnerability Name

Microsoft Windows Privilege Escalation Vulnerability

Description

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-0880