CVE-2019-1388

CVE Database · CVE-2019-1388

CVE-2019-1388

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

8.59%

Published

Nov 12, 2019

Modified

Oct 29, 2025

CISA Known Exploited Vulnerability

Added: 2023-04-07 · Due: 2023-04-28

Apply updates per vendor instructions.

Public PoC / Exploit (6)

All weaponized →

TrickestTrickest PoC index GitHub PoCjas502n/CVE-2019-1388★193 GitHub PoCsv3nbeast/CVE-2019-1388★72 GitHub PoCnobodyatall648/CVE-2019-1388★20 GitHub PoCsuprise4u/CVE-2019-1388★7 GitHub PoCjaychouzzk/CVE-2019-1388★0

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-269CWE-269

Affected Products (28)

microsoft · windows_10_1507vulnerable

microsoft · windows_10_1607vulnerable

microsoft · windows_10_1709vulnerable

microsoft · windows_10_1803vulnerable

References (5)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1388

PatchVendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-19-975/

Third Party Advisory

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1388

PatchVendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-19-975/

Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1388

US Government Resource

KEV Catalog EPSS Scores Vendors All CVEs