CVE-2019-1388highunder attackransomwareCWE-269

CVE-2019-1388: high-severity vulnerability in Microsoft Windows

Published · Updated

Follow this CVE+ Monitor Windows Server+ Monitor Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

76Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.8epss 8.6%
from disclosure to weapon9 days
Published on NVDNov 12
1st PoC+9d
CISA KEV+1242d
Action required by CISAfederal deadline: 2023-04-28

Apply updates per vendor instructions.

In short

A flaw in Windows' certificate dialog allows unprivileged users to gain elevated (admin) privileges by exploiting improper permission checks. An attacker can abuse the dialog to run commands with higher privileges than their account allows.

Technical detail

CWE-269 improper privilege management in Windows Certificate Dialog fails to enforce privilege restrictions. An attacker with standard user privileges can interact with the certificate dialog component to escalate to administrator-level execution; exploitation requires local access and user interaction with the vulnerable dialog.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Microsoft · WindowsMicrosoft · Windows 10 Version 1903 for 32-bit SystemsMicrosoft · Windows 10 Version 1903 for ARM64-based SystemsMicrosoft · Windows 10 Version 1903 for x64-based SystemsMicrosoft · Windows ServerMicrosoft · Windows Server, version 1903 (Server Core installation)
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows

In the same product, most dangerous first.

CVE-2019-0708CRITICALCVE-2019-0708EPSS 100.0%KEVCVE-2020-0796CRITICALCVE-2020-0796EPSS 99.8%KEVCVE-2020-0601HIGHCVE-2020-0601EPSS 89.1%KEVCVE-2019-1458HIGHCVE-2019-1458EPSS 74.4%KEVCVE-2020-0938HIGHCVE-2020-0938EPSS 69.0%KEVCVE-2020-1020HIGHCVE-2020-1020EPSS 65.0%KEV