CVE-2019-1322

CVE Database · CVE-2019-1322

CVE-2019-1322

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

19.20%

Published

Oct 10, 2019

Modified

Oct 29, 2025

CISA Known Exploited Vulnerability

Added: 2022-03-15 · Due: 2022-04-05

Apply updates per vendor instructions.

Public PoC / Exploit (3)

All weaponized →

Exploit-DBMicrosoft UPnP - Local Privilege Elevation (Metasploit)Exploit-DBMicrosoft Windows 10 Build 1803 < 1903 - 'COMahawk' Local Privilege Escalation TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products (12)

microsoft · windows_10_1803vulnerable

microsoft · windows_10_1809vulnerable

microsoft · windows_10_1903vulnerable

microsoft · windows_server_1803vulnerable

References (5)

http://packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilege-Elevation.html

ExploitThird Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1322

PatchVendor Advisory

http://packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilege-Elevation.html

ExploitThird Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1322

PatchVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1322

KEV Catalog EPSS Scores Vendors All CVEs