CVE-2019-1287

CVE-2019-1287 is an elevation of privilege vulnerability affecting the Windows Network Connectivity Assistant, impacting various versions of Microsoft Windows 10, 8.1, and Server editions. With a CVSS score of 7.8 (HIGH), this vulnerability allows a local attacker to gain elevated privileges with low attack complexity and no user interaction, leading to high confidentiality, integrity, and availability impacts. While no public exploit code or Metasploit modules are available, and it is not listed in CISA's KEV catalog, the vulnerability received some community discussion and media coverage at the time of its disclosure.