VULNERABILITY INTELLIGENCE
CVE-2019-1214
CVSS score7.8 HIGH
EPSS probability1.42%
CISA KEVKnown exploited vulnerability
Published2019-09-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
Vendor / product: Microsoft / Windows
Description
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource