Actively exploited · Published Jan 8, 2019 · Assigned by microsoft
CVE-2019-0543
High 7.8 Exploited Ransomware
In plain English
A high-severity improper authentication in Windows from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on March 15, 2022). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 4.7% (higher than 92% of all known vulnerabilities). Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Apr 5, 2022.
Official description
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Affected products (as reported)
Weakness: CWE-287 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- 106408 vdb-entry, x_refsource_BID
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0543 x_refsource_CONFIRM
- 46156 exploit, x_refsource_EXPLOIT-DB
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0543 government-resource