high7.8Known exploitedPublic exploit code
CVE-2019-1215
Microsoft Windows Privilege Escalation Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows 10 (19H1 1901 x64) - 'ws2ifsl.sys' Use After Free Local Privilege Escalation (kASLR kCFG SMEP)2020-01-07 · local · windows_x86-64
Impact
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 1507 | All versions |
| Microsoft | Windows 10 1607 | All versions |
| Microsoft | Windows 10 1703 | All versions |
| Microsoft | Windows 10 1709 | All versions |
| Microsoft | Windows 10 1803 | All versions |
| Microsoft | Windows 10 1809 | All versions |
| Microsoft | Windows 10 1903 | All versions |
| Microsoft | Windows 7 | All versions |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 1803 | All versions |
| Microsoft | Windows Server 1903 | All versions |