CVE-2019-0880

A local privilege escalation flaw in Windows splwow64.exe allowed attackers to elevate from low to medium integrity, enabling further system compromise.

This vulnerability allowed local attackers to escalate privileges on Windows systems, bypassing security boundaries and enabling access to sensitive data or execution of malicious code. DIB organizations must ensure all Windows systems are patched against this known, actively exploited vulnerability to prevent lateral movement and data exfiltration. The failure stems from unpatched software handling, representing a classic negligence case where known CVEs remain unaddressed.

Shame score — A known, actively exploited vulnerability in a core OS component that attackers leveraged for privilege escalation, indicating severe negligence in patch management and system hardening.