CVE-2019-0880

CVE Database · CVE-2019-0880

CVE-2019-0880

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

2.40%

Published

Jul 15, 2019

Modified

Oct 29, 2025

CISA Known Exploited Vulnerability

Added: 2022-05-23 · Due: 2022-06-13

Apply updates per vendor instructions.

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products (25)

microsoft · windows_10_1507vulnerable

microsoft · windows_10_1607vulnerable

microsoft · windows_10_1703vulnerable

microsoft · windows_10_1709vulnerable

microsoft · windows_10_1803vulnerable

References (3)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0880

PatchVendor Advisory

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0880

PatchVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0880

US Government Resource

KEV Catalog EPSS Scores Vendors All CVEs