CVE-2019-0880

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. The affected component is splwow64.exe, a 64-bit helper process used by the Windows print spooler. The flaw carries a CVSS 3.1 base score of 7.8 and is tracked as CVE-2019-0880.

An attacker with local access and low privileges can invoke the vulnerable code path without user interaction, resulting in elevation to higher privileges that allow full control over confidentiality, integrity, and availability on the affected system. Exploitation occurs entirely locally and does not require network access or elevated rights to begin.

Microsoft published an advisory detailing the issue and corresponding security updates. The vulnerability also appears in CISA’s catalog of known exploited vulnerabilities, confirming observed in-the-wild use and underscoring the need to apply the vendor patches promptly.