Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2019-1215

Microsoft Windows Privilege Escalation Vulnerability

Description

Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 3 May 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.