CVE-2019-1214

A privilege escalation vulnerability in the Windows CLFS driver was actively exploited in the wild, allowing attackers to escalate privileges without remote code execution.

The Windows CLFS driver mishandles memory objects, enabling local privilege escalation. DIB organizations must ensure all Windows systems are patched immediately, as this vulnerability was actively exploited and could allow attackers to gain elevated access to systems, bypassing standard security controls.

Shame score — A known privilege escalation vulnerability was actively exploited in the wild, indicating a failure to patch a critical flaw that attackers leveraged to escalate privileges on Windows systems.