{
    "id": "CVE-2019-1214",
    "published": "2019-09-11 22:15:14",
    "last_modified": "2026-06-17 02:28:05",
    "cvss_score": "7.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-119",
    "description": "An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.",
    "epss_score": "0.01419",
    "epss_percentile": "0.71753",
    "kev": 1,
    "kev_due": "2022-05-03",
    "has_exploit": 0,
    "updated_at": "2026-09-27 18:17:23",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2022-05-03."
    },
    "products": [
        {
            "vendor": "microsoft",
            "product": "windows_10_1507"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10_1607"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10_1703"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10_1709"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10_1803"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10_1809"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10_1903"
        },
        {
            "vendor": "microsoft",
            "product": "windows_7"
        },
        {
            "vendor": "microsoft",
            "product": "windows_8.1"
        },
        {
            "vendor": "microsoft",
            "product": "windows_rt_8.1"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_1803"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_1903"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2008"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2012"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2016"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2019"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2019-1214",
        "date_added": "2021-11-03",
        "due_date": "2022-05-03",
        "vendor": "Microsoft",
        "product": "Windows",
        "name": "Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability",
        "ransomware": 0
    },
    "exploits": [],
    "refs_list": [
        "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214",
        "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1214"
    ]
}