CVE-2019-1214

high · 7.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

7.8

CVSS

1.4%

EPSS (exploit prob.)

72nd

EPSS percentile

2019-09-11

Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
microsoft	windows_10_1507	all versions
microsoft	windows_10_1507	all versions
microsoft	windows_10_1607	all versions
microsoft	windows_10_1607	all versions
microsoft	windows_10_1703	all versions
microsoft	windows_10_1703	all versions
microsoft	windows_10_1709	all versions
microsoft	windows_10_1709	all versions
microsoft	windows_10_1709	all versions
microsoft	windows_10_1803	all versions
microsoft	windows_10_1803	all versions
microsoft	windows_10_1803	all versions
microsoft	windows_10_1809	all versions
microsoft	windows_10_1809	all versions
microsoft	windows_10_1809	all versions
microsoft	windows_10_1903	all versions
microsoft	windows_10_1903	all versions
microsoft	windows_10_1903	all versions
microsoft	windows_7	all versions
microsoft	windows_8.1	all versions
microsoft	windows_rt_8.1	all versions
microsoft	windows_server_1803	all versions
microsoft	windows_server_1903	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	r2
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	all versions
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	all versions
microsoft	windows_server_2019	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-1214