CVE-2019-1215
HIGH KEV RANSOMWAREMicrosoft Windows 10 1507 - Improper Privilege Management
Title source: ruleDescription
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.
Exploits (3)
exploitdb
WORKING POC
by bluefrostsec · c++localwindows_x86-64
https://www.exploit-db.com/exploits/47935
nomisec
WORKING POC
152 stars
by bluefrostsecurity · local
https://github.com/bluefrostsecurity/CVE-2019-1215
Scores
CVSS v3
7.8
EPSS
0.0524
EPSS Percentile
90.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2019-09-10
InTheWild.io
2021-07-23
ENISA EUVD
EUVD-2019-9783
Ransomware Use
Confirmed
CWE
CWE-269
Status
published
Products (18)
microsoft/windows_10_1507
(2 CPE variants)
microsoft/windows_10_1607
(2 CPE variants)
microsoft/windows_10_1703
(2 CPE variants)
microsoft/windows_10_1709
(3 CPE variants)
microsoft/windows_10_1803
(3 CPE variants)
microsoft/windows_10_1809
(3 CPE variants)
microsoft/windows_10_1903
(3 CPE variants)
microsoft/windows_7
microsoft/windows_8.1
microsoft/windows_rt_8.1
... and 8 more
Published
Sep 11, 2019
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026