Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-1019

43
FAUCET Score

CVE-2019-1019 is a security feature bypass vulnerability in Microsoft Windows (versions 7 through 10, and Server 2008 through 2019) that allows an attacker to obtain a session key and sign messages via a specially crafted NETLOGON authentication request. This vulnerability has a CVSS score of 8.5 (HIGH) due to its network attack vector, high impact on confidentiality, integrity, and availability, and low privileges required, though it has high attack complexity. While not listed on the KEV catalog, there is public exploit code available on ExploitDB (EDB-47115), and it has garnered significant community discussion and media coverage, indicating a high level of awareness.

Impacted Technologies

VendorProductVersion(s)CPE
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
1607CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
1703CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
1709CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
1803CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.5HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
6.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
13.60%
Probability of exploitation in next 30 days
EPSS Percentile
96.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-47115 · Jul 12, 2019
This CVE's current EPSS score of 0.1360 is in the 96th percentile among its peer group of 1,162 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (42)

microsoftpatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1703 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1703 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1803 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1803 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows Server, version 1803 (Server Core Installation)
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1803 for ARM64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1809 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1809 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1809 for ARM64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2019
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2019 (Server Core installation)
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1709 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1709 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1709 for ARM64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1903 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1903 for ARM64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1903 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows Server, version 1903 (Server Core installation)
View patch
microsoftpatch availablevia msrc
Product: Windows 10 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1607 for 32-bit Systems
View patch
microsoftpatch availablevia msrc
Product: Windows 10 Version 1607 for x64-based Systems
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2016
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2016 (Server Core installation)
View patch
microsoftpatch availablevia msrc
Product: Windows 7 for 32-bit Systems Service Pack 1
View patch
microsoftpatch availablevia msrc
Product: Windows 7 for x64-based Systems Service Pack 1
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
View patch
microsoftpatch availablevia msrc
Product: Windows 8.1 for 32-bit systems
View patch
microsoftpatch availablevia msrc
Product: Windows 8.1 for x64-based systems
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 R2
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 R2 (Server Core installation)
View patch
microsoftpatch availablevia msrc
Product: Windows RT 8.1
microsoftpatch availablevia msrc
Product: Windows Server 2008 for x64-based Systems Service Pack 2
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for 32-bit Systems Service Pack 2
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2008 for Itanium-Based Systems Service Pack 2
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012
View patch
microsoftpatch availablevia msrc
Product: Windows Server 2012 (Server Core installation)
View patch

Vendor Advisories (1)

microsoft2019-Jun/CVE-2019-1019Important

Microsoft Windows Security Feature Bypass Vulnerability

Jun 11, 2019

References

packetstormsecurity.com / files/153639/Microsoft-Windows-HTTP-To-SMB-NTLM-Reflection-Privilege-Escalation.html
Third Party Advisory
portal.msrc.microsoft.com / en-US/security-guidance/advisory/CVE-2019-1019
PatchVendor Advisory
msrc.microsoft.com / update-guide/vulnerability/CVE-2019-1019