Actively exploited in the wild
Microsoft Windows Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-1215
HighCVSS 7.8KEVSummary
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, known as 'Windows Elevation of Privilege Vulnerability'.
Risk Assessment
A local attacker could exploit this to gain elevated privileges, potentially leading to full compromise of the affected system.
Recommendation
Apply the Microsoft security updates for Windows that address this vulnerability as soon as possible.
Other vulnerabilities in Winsock
Original NVD description (English source)
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.