CVE-2019-0880: Microsoft Windows Privilege Escalation Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-05-23. EPSS: 2.3% chance of exploitation in the next 30 days.

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

Affected products

• Microsoft Windows 10 1507: affected versions not specified
• Microsoft Windows 10 1607: affected versions not specified
• Microsoft Windows 10 1703: affected versions not specified
• Microsoft Windows 10 1709: affected versions not specified
• Microsoft Windows 10 1803: affected versions not specified
• Microsoft Windows 10 1809: affected versions not specified
• Microsoft Windows 10 1903: affected versions not specified
• Microsoft Windows 8.1: affected versions not specified
• Microsoft Windows Rt 8.1: affected versions not specified
• Microsoft Windows Server 1903: affected versions not specified
• Microsoft Windows Server 2012: affected versions not specified; version r2 only
• Microsoft Windows Server 2016: affected versions not specified
• Microsoft Windows Server 2019: affected versions not specified

Published 2019-07-15. Last modified 2026-06-17.