---
id: "CVE-2019-1214"
kind: "vulnerability"
aliases: ["CVE-2019-1214"]
title: "Microsoft Windows: Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability"
severity: "high"
cvss: 7.8
epss: 0.01419
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Microsoft Windows", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "windows"]
not_affected_if: ["fully-patched-windows"]
published_at: "2019-09-11T22:15:14+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:34+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1214", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1214", "first_seen_at": "2026-10-23T21:57:34+00:00"}]
---

# Microsoft Windows: Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

A flaw in the Windows Common Log File System (CLFS) driver mishandles objects in memory. A user who is already logged in on the machine can use it to gain higher privileges, such as SYSTEM.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Windows affected ? fixed ?

## Fix

Apply the Microsoft Windows updates for CVE-2019-1214 per vendor instructions, as CISA requires.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1214
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2019-1214
- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2019-1214

## From the sources

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_