CVE-2019-1019
Microsoft Windows Security Feature Bypass Vulnerability
HIGH 8.5EPSS 15.1%
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access another machine using the original user privileges.The issue has been addressed by changing how NTLM validates network authentication messages.
- Affected
- Microsoft · Windows 10 Version 1703 · Windows 10 Version 1803 · Windows Server, version 1803 (Server Core Installation) · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation)
- CVSS v3.1 MICROSOFT
- 8.5 HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS v3.0 NVD
- 8.5 HIGH
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.0 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P - EPSS
- 15.12% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2019-06-12
- Updated
- 2025-05-20
ExploitDB entries (1)
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1019
- http://packetstormsecurity.com/files/153639/Microsoft-Windows-HTTP-To-SMB-NTLM-Reflection…