{"id":"CVE-2019-0959","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-0959","generatedAt":"2026-10-28T19:05:13.376Z","title":"An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory.","description":"An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.\nTo exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.\nThe security update addresses the vulnerability by correcting how CLFS handles objects in memory.","published":"2019-06-12T14:29:02.000Z","lastModified":"2026-06-17T02:09:18.000Z","status":"Modified","sourceIdentifier":"secure@microsoft.com","cvss":{"version":"3.1","score":7,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["microsoft/windows 10","microsoft/windows server 2016","microsoft/windows server 2019"],"epss":{"score":0.03535,"percentile":0.89205,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2019-06-24","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":47028,"kind":"exploit","title":"Microsoft Windows - 'CmpAddRemoveContainerToCLFSLog' Arbitrary File/Directory Creation","url":"https://www.exploit-db.com/exploits/47028","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/47028.txt","file":"exploits/windows/dos/47028.txt","published":"2019-06-24","added":"2019-06-24","updated":"2019-06-24","author":"Google Security Research","type":"dos","platform":"windows","port":null,"verified":true,"codes":["CVE-2019-0959"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1795"}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB (verified) and the impact is high, while EPSS rates exploitation at 3.5%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0959","source":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0959","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-0959","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}