A local elevation of privilege vulnerability exists in how splwow64.exe handles certain…
Priority CRITICAL 93Exploited in the wildPublished · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
Why it matters now
Exploitation Active In CISA KEV since 2022-05-23CISA due date 2022-06-13
EPSS 0.02308 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Windows Server | 2012; 2012 (Core installation); 2012 R2; 2012 R2 (Core installation); 2016; 2016 (Core installation); version 1803 (Core Installation); 2019; 2019 (Core installation) | — | No fix listed | CNA |
| Microsoft | Windows | 8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems; 10 for x64-based Systems; 10 Version 1607 for 32-bit Systems; 10 Version 1607 for x64-based Systems; 10 Version 1703 for 32-bit Systems; 10 Version 1703 for x64-based Systems; 10 Version 1709 for 32-bit Systems; 10 Version 1709 for x64-based Systems; 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; 10 Version 1709 for ARM64-based Systems | — | No fix listed | CNA |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | all versions | — | No fix listed | CNA |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | all versions | — | No fix listed | CNA |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | all versions | — | No fix listed | CNA |
| Microsoft | Windows Server, version 1903 (Server Core installation) | all versions | — | No fix listed | CNA |
- Windows Server VendorMicrosoft Affected 2012; 2012 (Core installation); 2012 R2; 2012 R2 (Core installation); 2016; 2016 (Core installation); version 1803 (Core Installation); 2019; 2019 (Core installation) Fixed in — No fix listed CNA
- Windows VendorMicrosoft Affected 8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems; 10 for x64-based Systems; 10 Version 1607 for 32-bit Systems; 10 Version 1607 for x64-based Systems; 10 Version 1703 for 32-bit Systems; 10 Version 1703 for x64-based Systems; 10 Version 1709 for 32-bit Systems; 10 Version 1709 for x64-based Systems; 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; 10 Version 1709 for ARM64-based Systems Fixed in — No fix listed CNA
- Windows 10 Version 1903 for 32-bit Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
- Windows 10 Version 1903 for x64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
- Windows 10 Version 1903 for ARM64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
- Windows Server, version 1903 (Server Core installation) VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 25
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:* | not specified by NVD | Vulnerable | Microsoft |
- cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
Show 15 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* | r2 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2022-05-23 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2019-0880
- 2026-10-03 Alias added: GHSA-5c53-gj37-m7jp
More Microsoft Windows 10 1507 vulnerabilities
- TI-2017-06077 Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-24062 Windows SMB Client Elevation of Privilege Vulnerability KEVCVSS 3.1HIGH 8.8
- TI-2025-24042 Internet Shortcut Files Remote Code Execution Vulnerability KEVCVSS 3.1HIGH 8.8
- TI-2024-32708 Windows Task Scheduler Elevation of Privilege Vulnerability KEVCVSS 3.1HIGH 8.8
- TI-2024-29106 Windows MSHTML Platform Spoofing Vulnerability KEVCVSS 3.1HIGH 8.8
- TI-2024-19802 Windows MSHTML Platform Security Feature Bypass Vulnerability KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2019-0880 · CVE Program
- CVE-2019-0880 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-5c53-gj37-m7jp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences