TI-2019-01036 Aliases CVE-2019-1322 GHSA-44h5-7p9r-q2m9

An elevation of privilege vulnerability exists when Windows improperly handles…

CRITICAL 93Exploited in the wildPublished 2019-10-10 · Updated 2025-10-21

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.

Why it matters now

Exploitation Active In CISA KEV since 2022-03-15CISA due date 2022-04-05Known ransomware use

EPSS 0.18843 97th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Active
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microsoft	Windows	10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems	—	No fix listed	CNA
Microsoft	Windows Server	version 1803 (Core Installation); 2019; 2019 (Core installation)	—	No fix listed	CNA
Microsoft	Windows 10 Version 1903 for 32-bit Systems	all versions	—	No fix listed	CNA
Microsoft	Windows 10 Version 1903 for x64-based Systems	all versions	—	No fix listed	CNA
Microsoft	Windows 10 Version 1903 for ARM64-based Systems	all versions	—	No fix listed	CNA
Microsoft	Windows Server, version 1903 (Server Core installation)	all versions	—	No fix listed	CNA

Windows VendorMicrosoft Affected 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems Fixed in — No fix listed CNA
Windows Server VendorMicrosoft Affected version 1803 (Core Installation); 2019; 2019 (Core installation) Fixed in — No fix listed CNA
Windows 10 Version 1903 for 32-bit Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
Windows 10 Version 1903 for x64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
Windows 10 Version 1903 for ARM64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
Windows Server, version 1903 (Server Core installation) VendorMicrosoft Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPE	Versions	Role	Vendor
cpe:2.3:o:microsoft:windows_10_1803:-::::::arm64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1803:-::::::x64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1803:-::::::x86:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1809:-::::::arm64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1809:-::::::x64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1809:-::::::x86:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1903:-::::::arm64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1903:-::::::x64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_10_1903:-::::::x86:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_1803:-::::::x64:	not specified by NVD	Vulnerable	Microsoft

cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft

Show 2 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:microsoft:windows_server_1903:-::::::x64:	not specified by NVD	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2019:-:::::::*	not specified by NVD	Vulnerable	Microsoft

cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

2022-03-15 Added to CISA KEV
2026-10-02 Threatist record created from CVE-2019-1322
2026-10-03 Alias added: GHSA-44h5-7p9r-q2m9

References

Exploit 1

http://packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilege-Elevation.html

Patch 1

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1322

TI-2020-00989 Out-of-bounds write in Microsoft Windows KEVCVSS 3.1HIGH 8.8
TI-2019-00654 A remote code execution vulnerability exists in the way that the Windows Graphics Device… KEVCVSS 3.1HIGH 8.8
TI-2018-06097 Improper input validation in Microsoft Windows 10 Servers KEVCVSS 3.1HIGH 8.8
TI-2018-00765 A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails… KEVCVSS 3.1HIGH 8.8
TI-2018-06276 An elevation of privilege vulnerability exists in Windows when the Win32k component fails… KEVCVSS 3.1HIGH 8.4
TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1

See all 44 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences