CVE-2019-1215
HIGH KEV RANSOMWAREMicrosoft Windows 10 1507 - Improper Privilege Management
Title source: ruleDescription
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.
Exploits (3)
nomisec
WORKING POC
152 stars
by bluefrostsecurity · local
https://github.com/bluefrostsecurity/CVE-2019-1215
exploitdb
WORKING POC
by bluefrostsec · c++localwindows_x86-64
https://www.exploit-db.com/exploits/47935
Scores
CVSS v3
7.8
EPSS
0.0770
EPSS Percentile
91.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation Intel
CISA KEV
2021-11-03
VulnCheck KEV
2019-09-10
InTheWild.io
2021-07-23
ENISA EUVD
EUVD-2019-9783
Ransomware Use
Confirmed
Classification
CWE
CWE-269
Status
published
Affected Products (30)
microsoft/windows_10_1507
microsoft/windows_10_1507
microsoft/windows_10_1607
microsoft/windows_10_1607
microsoft/windows_10_1703
microsoft/windows_10_1703
microsoft/windows_10_1709
microsoft/windows_10_1709
microsoft/windows_10_1709
microsoft/windows_10_1803
microsoft/windows_10_1803
microsoft/windows_10_1803
microsoft/windows_10_1809
microsoft/windows_10_1809
microsoft/windows_10_1809
... and 15 more
Timeline
Published
Sep 11, 2019
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026