EXPOSURES › CVE-2019-0543
CVE-2019-0543
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows vulnerability allowed attackers to escalate privileges, actively exploited and linked to ransomware campaigns.
CVE-2019-0543 is a privilege escalation vulnerability in Windows that enables attackers to execute code with elevated permissions. DIB organizations using vulnerable Windows systems face increased risk of ransomware infection and data compromise, impacting CMMC compliance. Prompt patching and vulnerability scanning are essential.
Shame score — The widespread exploitation of a privilege escalation vulnerability in a core operating system, linked to ransomware, demonstrates a significant failure in Microsoft's security posture and highlights the potential for severe DIB impact.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |