Live › vulnerability › CVE-2019-1315
Go to dashboardWindows Error Reporting manager mishandles hard links, letting a local user overwrite a targeted file and gain elevated privileges. Sources say it is exploited in the wild and tagged with ransomware use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
Unknown from the sources.
Apply the Microsoft update for CVE-2019-1315 per vendor instructions; the sources do not name the patched build.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-1315")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.