Skip to content
COOEY

EXPOSURES › CVE-2019-0863

CVE-2019-0863

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-0863 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 78/100 rceexploited-in-wildunpatchedprivilege-escalation

A privilege escalation vulnerability in Windows Error Reporting allowed kernel-mode code execution, listed in CISA's KEV catalog as actively exploited.

The Windows Error Reporting (WER) component mishandled files, enabling attackers to escalate privileges and execute arbitrary code in kernel mode. DIB organizations must ensure all Windows systems are patched against CVE-2019-0863, as its inclusion in the KEV catalog confirms active exploitation in the wild. Failure to patch exposes systems to remote code execution and severe compliance violations under NIST 800-171.

Shame score — A known privilege escalation vulnerability was actively exploited in the wild and cataloged by CISA, indicating a failure to patch a critical flaw that could lead to full system compromise.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
CVE-2019-0863 was a critical kernel-mode privilege escalation flaw in Windows Error Reporting, widely recognized as a severe security failure requiring urgent patching and reflecting poorly on Microso
cooey ↗ severe-fallout -0.80
NVD entry frames the flaw as a serious kernel-mode privilege escalation vulnerability, implying severe impact and urgent remediation needs.
"Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode."
AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized