[ CVE-2019-1214 · Published 11 Sep 2019 ]
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 1%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2021-11-03
[ Description ]Official description
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
CISA: Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 3 May 2022): Apply updates per vendor instructions.
- Patch on portal.msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214PatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource