EXPOSURES › CVE-2019-1322
CVE-2019-1322
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows vulnerability allowed attackers to escalate privileges, actively exploited and linked to ransomware campaigns.
CVE-2019-1322 is a privilege escalation vulnerability in Windows where improper authentication handling allowed attackers to gain elevated access. DIB organizations using vulnerable Windows systems face increased risk of ransomware infection and compliance failures (NIST 800-171 controls 3, 4, 5). Immediate patching and vulnerability scanning are required.
Shame score — The vulnerability's active exploitation by ransomware groups highlights a significant failure in Microsoft's security posture and a potential for widespread compromise within the DIB.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |