CVE-2019-1388
KEVRansomware UseMicrosoft Windows Certificate Dialog Privilege Escalation Vulnerability
Description
Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedNov 12, 2019
Last modifiedJun 17, 2026
Added to KEVApr 7, 2023
Remediation dueApr 28, 2023
References
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1388PatchVendor Advisory
- zerodayinitiative.com/advisories/ZDI-19-975/Third Party Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1388US Government Resource
0 recent articles mention this CVE
80
Risk assessment · Critical
Actively exploited and used by ransomware crews. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1277 days
- Ransomware
- Used in known ransomware campaigns
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 8.6% · top 5% of all CVEs
- Weakness
- CWE-269
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
- 4.Verify offline/immutable backups and segment the affected systems. This flaw is used for ransomware initial access.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.