CVE-2019-0880VulnerabilityPublished 05/23/2022Updated 10/24/2026

CVE-2019-0880: Microsoft Windows Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/23/2022
KEV deadline: 06/13/2022
EPSS: 2.3% chance of exploitation in 30 days – higher than 83% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-0880 (opens in a new tab)

Description

CVE-2019-0880 is a local privilege escalation vulnerability in Microsoft Windows involving the splwow64.exe process. Exploitation allows an attacker to elevate privileges from low-integrity to medium-integrity on an affected system. This vulnerability has been observed exploited in the wild.

Summary

This vulnerability arises from how the splwow64.exe process in Microsoft Windows handles certain calls, enabling a local attacker to elevate their privileges from a low-integrity level to a medium-integrity level. The vulnerability is identified as CVE-2019-0880 and has been confirmed to be exploited in the wild. No specific affected Windows versions or patch information are provided in the available data.

Impact

Successful exploitation allows an attacker with local access to increase their privileges on the system, potentially enabling actions that require higher integrity levels. This can facilitate further system compromise or bypass of security controls that rely on integrity levels.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microsoft advisories for updates and apply any available security updates promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:41:04 UTC

References

Related threats