CVE-2019-0543: Microsoft Windows Privilege Escalation Vulnerability
Vulnerability summary
CVE-2019-0543 is a high (CVSS 7.8) Improper Authentication vulnerability in Microsoft Windows. It is known to be exploited: CISA lists it, first on 15-03-2022. It has been used in ransomware campaigns. EPSS estimates a 4.72% chance of exploitation in the next 30 days, higher than 91.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 08-01-2019PublishedVulnerability first disclosed.
- 15-03-2022Added to CISA KEVMicrosoft Windows Privilege Escalation Vulnerability
- 05-04-2022CISA remediation dueApply updates per vendor instructions.
- 12-01-2026Last modifiedVulnerability information updated.
Description
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
4.72%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.72% on 19-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 15-03-2022
- Federal due date
- 05-04-2022
CISA required action
Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2019-0543
Public exploits
1 foundMicrosoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Microsoft15 products
1 vendor · 15 products
References
4 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0543X Refsource CONFIRMPatchVendor Advisory- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0543Government ResourceUS Government Resource