Skip to main content
IMMUNITYSEC

CVE-2019-1215

7.8
HIGH
CVSS 3.1
EPSS 19.3% · 97th pctCISA KEV · Exploited in the wild
2019-09-11Updated 2025-10-21KEV 2021-11-03
CISA Known Exploited Vulnerabilities

Microsoft Windows Privilege Escalation Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV
2021-11-03
Remediation due
2022-05-03
Ransomware
Known use

Required action
Apply updates per vendor instructions.

CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2019-1215

Description

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.

Severity

CVSS 3.1 · CISA7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC · CISA-ADP
Exploitationactive
Automatableno
Technical impacttotal

Exploitation Context

as of October 17, 2026
All KEV statistics→
  • CISA added CVE-2019-1215 to the KEV catalog 784 days after its CVE record was published.
  • It is one of 391 Microsoft entries in the CISA KEV catalog, and one of 83 added in 2021.
  • Its current EPSS score (19.3%) is higher than that of 34% of CISA KEV entries.

Affected Products

ProductAffected versions
Microsoft
Windows
7 for 32-bit Systems Service Pack 1
7 for x64-based Systems Service Pack 1
8.1 for 32-bit systems
8.1 for x64-based systems
RT 8.1
10 for 32-bit Systems
10 for x64-based Systems
10 Version 1607 for 32-bit Systems
10 Version 1607 for x64-based Systems
10 Version 1703 for 32-bit Systems
10 Version 1703 for x64-based Systems
10 Version 1709 for 32-bit Systems
10 Version 1709 for x64-based Systems
10 Version 1803 for 32-bit Systems
10 Version 1803 for x64-based Systems
10 Version 1803 for ARM64-based Systems
10 Version 1809 for 32-bit Systems
10 Version 1809 for x64-based Systems
10 Version 1809 for ARM64-based Systems
10 Version 1709 for ARM64-based Systems
Microsoft
Windows Server
2008 R2 for x64-based Systems Service Pack 1 (Core installation)
2008 R2 for Itanium-Based Systems Service Pack 1
2008 R2 for x64-based Systems Service Pack 1
2008 for 32-bit Systems Service Pack 2 (Core installation)
2012
2012 (Core installation)
2012 R2
2012 R2 (Core installation)
2016
2016 (Core installation)
version 1803 (Core Installation)
2019
2019 (Core installation)
2008 for Itanium-Based Systems Service Pack 2
2008 for 32-bit Systems Service Pack 2
2008 for x64-based Systems Service Pack 2
2008 for x64-based Systems Service Pack 2 (Core installation)
Microsoft
Windows 10 Version 1903 for 32-bit Systems
unspecified
Microsoft
Windows 10 Version 1903 for x64-based Systems
unspecified
Microsoft
Windows 10 Version 1903 for ARM64-based Systems
unspecified
Microsoft
Windows Server, version 1903 (Server Core installation)
unspecified

References

1 Links

Record Details

Published
2019-09-11
Last updated
2025-10-21
Assigner (CNA)
microsoft
Credited to
-

More from Microsoft

All Microsoft CVEs→
CVE-2025-592879.8 CRITICAL

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

MicrosoftKEVEPSS 100.0%2025-10-14
CVE-2021-345278.8 HIGH

Windows Print Spooler Remote Code Execution Vulnerability

MicrosoftKEVEPSS 99.8%2021-07-02
CVE-2024-214128.1 HIGH

Internet Shortcut Files Security Feature Bypass Vulnerability

MicrosoftKEVEPSS 99.4%2024-02-13
CVE-2022-301907.8 HIGH

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

MicrosoftKEVEPSS 99.2%2022-06-01

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.