Microsoft Windows Privilege Escalation Vulnerability

Added Nov. 3, 2021 • Due May 3, 2022 • CVE-2019-1215

Overdue Microsoft / Windows Known Ransomware Use

Description

Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.

Required Action

Apply updates per vendor instructions.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-1215

Additional Information

Catalog Version: 2025.01.24
Catalog Released: Jan. 24, 2025
Days Until Due: 0 days
Last Updated: 6 months ago