CVE-2019-0880
ENISA EUVD: EUVD-2019-1629 ↗
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 5, 2026
3 articles
Published: 2019-07-15
EPSS Score
Source: FIRST.org · 2026-05-24
4.08%
probability
This CVE has a 4.08% probability
of being exploited in the next 30 days.
0%
Top 88.7th percentile of all CVEs
100%
CVSS v3.1
Source: VulnerabilityLookup (CIRCL)7.8
HIGH
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
VulnerabilityLookup (CNA)A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
Affected Products
Microsoft
Windows Server
2012
2012 (Core installation)
2012 R2
2012 R2 (Core installation)
2016
2016 (Core installation)
Microsoft
Windows
8.1 for 32-bit systems
8.1 for x64-based systems
RT 8.1
10 for 32-bit Systems
10 for x64-based Systems
10 Version 1607 for 32-bit Systems
Microsoft
Windows 10 Version 1903 for 32-bit Systems
unspecified
Microsoft
Windows 10 Version 1903 for x64-based Systems
unspecified
Microsoft
Windows 10 Version 1903 for ARM64-based Systems
unspecified
Google Project Zero
Patched
July 9, 2019
Reported by
Gene Yoo of Resecurity, Inc.
Root Cause Analysis
???
Signal Intelligence
Confidence
95%
EPSS
4.08%
CVSS v3.1
7.8
Mentions
3
Last Seen
Jul 09, 2019
CNA Information
CNA Assigner
microsoft
Analyst Note
Auto-imported from Google Project Zero — confirmed zero-day by definition.
Triage Info
Decided atMar 05, 2026
Published DateJul 15, 2019