CVE-2019-1022

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running. The update addresses the vulnerability by correcting how the Windows Audio Service handles processes these requests.

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1022
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1022Patch, Vendor Advisory

Published

Jun 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10214The containers/image library used by the container tools Pod…5.9
• CVE-2019-10215Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a…6.1
• CVE-2019-10216In ghostscript before version 9.50, the .buildfont1 procedur…7.8
• CVE-2019-10217A flaw was found in ansible 2.8.0 before 2.8.4. Fields manag…6.5
• CVE-2019-10218A flaw was found in the samba client, all samba versions bef…6.5
• CVE-2019-10219A vulnerability was found in Hibernate-Validator. The SafeHt…6.1
• CVE-2019-10220Linux kernel CIFS implementation, version 4.9.0 is vulnerabl…8.8
• CVE-2019-10221A Reflected Cross Site Scripting vulnerability was found in …6.1
• CVE-2019-10222A flaw was found in the Ceph RGW configuration with Beast as…7.5
• CVE-2019-10223A security issue was discovered in the kube-state-metrics ve…6.5
• CVE-2019-10224A flaw has been found in 389-ds-base versions 1.4.x.x before…4.6
• CVE-2019-10225A flaw was found in atomic-openshift of openshift-4.2 where …6.3