CVE-2019-1019
Microsoft Windows Security Feature Bypass Vulnerability
CVE-2019-1019 is fixed in 41 products on 1 platform, first by KB4503267, released June 11, 2019. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.5
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1512
96th percentile
<p>A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.</p> <p>To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access another machine using the original user privileges.</p> <p>The issue has been addressed by changing how NTLM validates network authentication messages.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Windows 10 Version 1607 for 32-bit Systems | 14393.3025 | KB4503267 | Jun 11, 2019 |
| Windows 10 Version 1607 for x64-based Systems | 14393.3025 | KB4503267 | Jun 11, 2019 |
| Windows 10 Version 1703 for 32-bit Systems | 15063.1868 | KB4503279 | Jun 11, 2019 |
| Windows 10 Version 1703 for x64-based Systems | 15063.1868 | KB4503279 | Jun 11, 2019 |
| Windows 10 Version 1709 for 32-bit Systems | 16299.1217 | KB4503284 | Jun 11, 2019 |
| Windows 10 Version 1709 for ARM64-based Systems | 16299.1217 | KB4503284 | Jun 11, 2019 |
| Windows 10 Version 1709 for x64-based Systems | 16299.1217 | KB4503284 | Jun 11, 2019 |
| Windows 10 Version 1803 for 32-bit Systems | 17134.829 | KB4503286 | Jun 11, 2019 |
| Windows 10 Version 1803 for ARM64-based Systems | 17134.829 | KB4503286 | Jun 11, 2019 |
| Windows 10 Version 1803 for x64-based Systems | 17134.829 | KB4503286 | Jun 11, 2019 |
| Windows 10 Version 1809 for 32-bit Systems | 17763.557 | KB4503327 | Jun 11, 2019 |
| Windows 10 Version 1809 for ARM64-based Systems | 17763.557 | KB4503327 | Jun 11, 2019 |
| Windows 10 Version 1809 for x64-based Systems | 17763.557 | KB4503327 | Jun 11, 2019 |
| Windows 10 Version 1903 for 32-bit Systems | 18362.175 | KB4503293 | Jun 11, 2019 |
| Windows 10 Version 1903 for ARM64-based Systems | 18362.175 | KB4503293 | Jun 11, 2019 |
| Windows 10 Version 1903 for x64-based Systems | 18362.175 | KB4503293 | Jun 11, 2019 |
| Windows 10 for 32-bit Systems | 10240.18244 | KB4503291 | Jun 11, 2019 |
| Windows 10 for x64-based Systems | 10240.18244 | KB4503291 | Jun 11, 2019 |
| Windows 7 for 32-bit Systems Service Pack 1 | KB4503292 | Jun 11, 2019 | |
| Windows 7 for 32-bit Systems Service Pack 1 | KB4503269 | Jun 11, 2019 | |
| Windows 7 for x64-based Systems Service Pack 1 | KB4503292 | Jun 11, 2019 | |
| Windows 7 for x64-based Systems Service Pack 1 | KB4503269 | Jun 11, 2019 | |
| Windows 8.1 for 32-bit systems | KB4503276 | Jun 11, 2019 | |
| Windows 8.1 for 32-bit systems | KB4503290 | Jun 11, 2019 | |
| Windows 8.1 for x64-based systems | KB4503276 | Jun 11, 2019 | |
| Windows 8.1 for x64-based systems | KB4503290 | Jun 11, 2019 | |
| Windows RT 8.1 | KB4503276 | Jun 11, 2019 | |
| Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 | KB4503292 | Jun 11, 2019 | |
| Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 | KB4503269 | Jun 11, 2019 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB4503292 | Jun 11, 2019 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB4503269 | Jun 11, 2019 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | KB4503292 | Jun 11, 2019 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | KB4503269 | Jun 11, 2019 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | KB4503273 | Jun 11, 2019 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | KB4503287 | Jun 11, 2019 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | KB4503273 | Jun 11, 2019 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | KB4503287 | Jun 11, 2019 | |
| Windows Server 2008 for Itanium-Based Systems Service Pack 2 | KB4503273 | Jun 11, 2019 | |
| Windows Server 2008 for Itanium-Based Systems Service Pack 2 | KB4503287 | Jun 11, 2019 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 | KB4503273 | Jun 11, 2019 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 | KB4503287 | Jun 11, 2019 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | KB4503273 | Jun 11, 2019 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | KB4503287 | Jun 11, 2019 | |
| Windows Server 2012 | KB4503285 | Jun 11, 2019 | |
| Windows Server 2012 | KB4503263 | Jun 11, 2019 | |
| Windows Server 2012 (Server Core installation) | KB4503285 | Jun 11, 2019 | |
| Windows Server 2012 (Server Core installation) | KB4503263 | Jun 11, 2019 | |
| Windows Server 2012 R2 | KB4503276 | Jun 11, 2019 | |
| Windows Server 2012 R2 | KB4503290 | Jun 11, 2019 | |
| Windows Server 2012 R2 (Server Core installation) | KB4503276 | Jun 11, 2019 | |
| Windows Server 2012 R2 (Server Core installation) | KB4503290 | Jun 11, 2019 | |
| Windows Server 2016 | 14393.3025 | KB4503267 | Jun 11, 2019 |
| Windows Server 2016 (Server Core installation) | 14393.3025 | KB4503267 | Jun 11, 2019 |
| Windows Server 2019 | 17763.557 | KB4503327 | Jun 11, 2019 |
| Windows Server 2019 (Server Core installation) | 17763.557 | KB4503327 | Jun 11, 2019 |
| Windows Server, version 1803 (Server Core Installation) | 17134.829 | KB4503286 | Jun 11, 2019 |
| Windows Server, version 1903 (Server Core installation) | 18362.175 | KB4503293 | Jun 11, 2019 |