CVE-2019-1019: microsoft windows_10
Vulnerability summary
CVE-2019-1019 is a high (CVSS 8.5) vulnerability in microsoft windows_10. EPSS estimates a 15.12% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 12-06-2019PublishedVulnerability first disclosed.
- 20-05-2025Last modifiedVulnerability information updated.
Description
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access another machine using the original user privileges. The issue has been addressed by changing how NTLM validates network authentication messages.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST8.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
15.12%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 15.12% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Microsoft32 products
- windows_10na | 1607 | 1703 | 1709 | 1803 | 1809 | 1903
- windows 10 version 1507≥ 10.0.10240.0, < publication
- windows 10 version 1607≥ 10.0.14393.0, < publication
- windows 10 version 1703≥ 10.0.0, < publication
- windows 10 version 1709≥ 10.0.0, < publication
1 vendor · 32 products
References
3 links
msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1019Vendor Advisory- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1019X Refsource MISCX TransferredPatchVendor Advisory