{"metadata": {"vulnerability": "CVE-2019-1385", "count": 52, "kinds": {"milestone": 5, "sighting": 15, "kev": 11, "other": 21}, "linked_omitted": 0}, "data": [{"timestamp": "2018-11-26T00:00:00Z", "date_only": false, "value": "2018-11-26T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-11-12T18:52:54Z", "date_only": false, "value": "2019-11-12T18:52:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-11-12T19:15:00Z", "date_only": false, "value": "2019-11-12T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6VJH-65XF-7489", "record": "GHSA-6VJH-65XF-7489", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-11-12T19:15:00Z", "date_only": false, "value": "2019-11-12T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-1385", "record": "GSD-2019-1385", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2019-11-12T19:15:12.503Z", "date_only": false, "value": "2019-11-12T19:15:12.503", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1385", "record": "FKIE_CVE-2019-1385", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-11-12T23:00:00Z", "date_only": false, "value": "2019-11-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0884", "record": "WID-SEC-W-2023-0884", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2019-11-12T23:00:00Z", "date_only": false, "value": "2019-11-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0884", "record": "WID-SEC-W-2023-0884", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-11-12T23:00:00Z", "date_only": false, "value": "2019-11-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0884", "record": "WID-SEC-W-2023-0884", "field": "vulnerabilities.27.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-11-13T00:00:00Z", "date_only": false, "value": "2019-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-568", "record": "CERTFR-2019-AVI-568", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2019-11-14T00:06:46Z", "date_only": false, "value": "2019-11-14T00:06:46.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2019-1385", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-12-04T23:00:00Z", "date_only": false, "value": "2019-12-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0884", "record": "WID-SEC-W-2023-0884", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2020-08-24T17:37:00Z", "date_only": false, "value": "2020-08-24T17:37Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-1385", "record": "GSD-2019-1385", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2019-1385", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f0493fdc-a47f-47fe-952b-0cabfb8f15ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": true, "value": "2022-05-23", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1385", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2019-1385", "field": "evidence.0.details.added_date", "uuid": "f0493fdc-a47f-47fe-952b-0cabfb8f15ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": true, "value": "2022-05-23", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "evidence.0.details.date_added", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2019-1385", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f0493fdc-a47f-47fe-952b-0cabfb8f15ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "status.status_updated_at", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2019-1385", "field": "status.status_updated_at", "uuid": "f0493fdc-a47f-47fe-952b-0cabfb8f15ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1385", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2019-1385 added to CISA KEV"}, {"timestamp": "2022-05-24T22:01:10Z", "date_only": false, "value": "2022-05-24T22:01:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6VJH-65XF-7489", "record": "GHSA-6VJH-65XF-7489", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-31T00:00:00Z", "date_only": false, "value": "2022-05-31T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1385", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2022-05-31T00:00:00Z", "date_only": false, "value": "2022-05-31T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1385", "record": "FKIE_CVE-2019-1385", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2022-06-13T00:00:00Z", "date_only": true, "value": "2022-06-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "evidence.0.details.due_date", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-04-10T22:00:00Z", "date_only": false, "value": "2023-04-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0884", "record": "WID-SEC-W-2023-0884", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-04-10T22:00:00Z", "date_only": false, "value": "2023-04-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0884", "record": "WID-SEC-W-2023-0884", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-06-14T21:10:03Z", "date_only": false, "value": "2023-06-14T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "b31d5032-08b6-4623-b2fd-ee3b8be82e73"}, {"timestamp": "2023-12-04T16:24:36Z", "date_only": false, "value": "2023-12-04T16:24:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1249", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "f6e5f1a2-f533-4913-aeca-b186adb135cb", "content": "#ExploitObserverAlert\n\nCVE-2019-1385\n\nDESCRIPTION: Exploit Observer has 13 entries related to CVE-2019-1385. An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.\n\nFIRST-EPSS: 0.004870000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1249"}, {"timestamp": "2023-12-13T01:23:52.117Z", "date_only": false, "value": "2023-12-13T01:23:52.117543Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-1385", "record": "GSD-2019-1385", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-11T15:06:53Z", "date_only": false, "value": "2024-02-11T15:06:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/182809", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "e3cd94e1-7c5e-4392-8186-a62f9a371d5d", "content": "https://ift.tt/rZ6gjYp\nCVE-2019-1385 | Microsoft Windows up to Server 2019 AppX Deployment Extension privileges management", "url": "https://t.me/ctinow/182809"}, {"timestamp": "2024-03-15T08:58:02Z", "date_only": false, "value": "2024-03-15T08:58:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pt_soft/243", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "5bcd85b2-e0a6-40e1-b0f8-a084d8d4c8d5", "content": "\ud83d\uddbc\ufe0f Moriarty v1.1\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/243"}, {"timestamp": "2024-05-03T09:04:40Z", "date_only": false, "value": "2024-05-03T09:04:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pt_soft/270", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "d02aa8a9-3641-4e58-98da-4c651f8f91db", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/270", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-04T18:13:30.512Z", "date_only": false, "value": "2024-08-04T18:13:30.512Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-1385", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:48:17.777Z", "date_only": false, "value": "2024-08-15T17:48:17.777+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0884", "record": "WID-SEC-W-2023-0884", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-12-24T20:30:59.784Z", "date_only": false, "value": "2024-12-24T20:30:59.784196Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971550", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "a2abca0f-8b3c-49f5-b04c-580604a9c190", "url": "https://feedsin.space/feed/CISAKevBot/items/2971550"}, {"timestamp": "2025-02-23T02:10:23Z", "date_only": false, "value": "2025-02-23T02:10:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "0b53e23b-d890-4d57-941c-bfe462a58732"}, {"timestamp": "2025-10-22T00:31:48Z", "date_only": false, "value": "2025-10-22T00:31:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6VJH-65XF-7489", "record": "GHSA-6VJH-65XF-7489", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:27:46.530Z", "date_only": false, "value": "2026-02-02T12:27:46.530771Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "9e0d416c-15cb-421e-affe-0c3555dd9c6d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-30T03:03:07.219Z", "date_only": false, "value": "2026-05-30T03:03:07.219738Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/briankrebs/statuses/116661298779426573", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "1facdbf1-6b81-4174-b397-bd9ca687dea6", "content": "RE: https://c.im/@cdarwin/116660769695837565\nOne reason that Microsoft might be issuing such harshly worded language here to describe the researcher may be that, according to Nightmare Eclipse, they until recently worked as a security researcher at Microsoft.\nScroll back far enough through their Xitter account (to June 2020) and you will see they claimed CVE-2019-1385 was theirs. \nOn July 1, 2021, Nightmare Eclipse complained that Microsoft failed to fix one of the weaknesses they reported in CVE-2021-24084. Microsoft credits both of these flaws to the same researcher, whose LinkedIn account says they are in Germany and worked full time at Microsoft from Sept. 2022 to June 2025. \nFor the record, I think @GossiTheDog called it that this person was a former MS employee.\nhttps://x.com/ChaoticEclipse0/with_replies", "url": "https://infosec.exchange/users/briankrebs/statuses/116661298779426573"}, {"timestamp": "2026-05-30T14:24:53.250Z", "date_only": false, "value": "2026-05-30T14:24:53.250247Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/briankrebs/statuses/116663981709666679", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "68577ce2-3c1c-42a6-9017-dc543ca5c04c", "content": "This person has been a prolific bug finder for quite some time. Here's their public HackerOne profile: https://hackerone.com/halove23/hacktivity?type=user\nReading their Xitter timeline over the years is pretty interesting. They went from working w/ a lot of these bug bounty programs and giving MS time to fix stuff beyond the usual 90-day window to increasing frustration in dealing w/ vendors. I wish that were less of an common experience than it still is today, but some dynamics in this industry never seem to change.\nAlso just noticed something interesting. Back in 2019, MS was including hyperlinks to researchers in their advisories. In this advisory, they actually link to the researcher's shitposting Facebook profile, which has posts up until this month.\nhttps://www.facebook.com/com.android.vending\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-1385", "url": "https://infosec.exchange/users/briankrebs/statuses/116663981709666679"}, {"timestamp": "2026-06-19T12:47:15.803Z", "date_only": false, "value": "2026-06-19T12:47:15.803450Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8bf9df41-a116-4d2e-9c7b-02f2a5d65214", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "65007b84-e201-4aeb-aae7-59e2981e836c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8bf9df41-a116-4d2e-9c7b-02f2a5d65214", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2019-1385", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f0493fdc-a47f-47fe-952b-0cabfb8f15ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:22.018Z", "date_only": false, "value": "2026-06-23T14:05:22.018839Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0493fdc-a47f-47fe-952b-0cabfb8f15ac", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "a87acf69-074e-4557-a8d4-7cf491bf15b6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0493fdc-a47f-47fe-952b-0cabfb8f15ac", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T13:00:24.459Z", "date_only": false, "value": "2026-08-04T13:00:24.459566Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/59", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "97c559d8-6cd7-4a42-ab55-7ab2951310ce", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "url": "https://t.me/wh_lab/59"}, {"timestamp": "2026-08-06T00:00:42.306Z", "date_only": false, "value": "2026-08-06T00:00:42.306262Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wh_lab/59", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "45976484-cd7b-4460-8248-878178ad0137", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "url": "https://t.me/wh_lab/59", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-12T03:55:59.649Z", "date_only": false, "value": "2026-08-12T03:55:59.649Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T03:55:59.649Z", "date_only": false, "value": "2026-08-12T03:55:59.649Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1385", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T05:17:23.810Z", "date_only": false, "value": "2026-08-12T05:17:23.810", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1385", "record": "FKIE_CVE-2019-1385", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-12T07:08:15.375Z", "date_only": false, "value": "2026-08-12T07:08:15.375612Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msul2657a62d", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "bf46772e-98ad-4c55-bfd3-0caeb126cd28", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2019-1385: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privi\u2026\nCVSS 7.8 \u00b7 EPSS 3.6% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2019-1385\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3msul2657a62d"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T17:20:22.204Z", "anchors": {"origin": {"timestamp": "2019-11-12T18:52:54Z", "date_only": false, "value": "2019-11-12T18:52:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-11-12T18:52:54Z", "date_only": false, "value": "2019-11-12T18:52:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-05-03T09:04:40Z", "date_only": false, "value": "2024-05-03T09:04:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pt_soft/270", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "d02aa8a9-3641-4e58-98da-4c651f8f91db", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/270", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 79679226.0, "hours": 22133.118333333332, "days": 922.2132638888888, "min_seconds": 79679226.0, "max_seconds": 79765626.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-11-12T18:52:54Z", "date_only": false, "value": "2019-11-12T18:52:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 79679226.0, "hours": 22133.118333333332, "days": 922.2132638888888, "min_seconds": 79679226.0, "max_seconds": 79765626.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-11-12T18:52:54Z", "date_only": false, "value": "2019-11-12T18:52:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 141142306.0, "hours": 39206.19611111111, "days": 1633.5915046296295, "min_seconds": 141142306.0, "max_seconds": 141142306.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-11-12T18:52:54Z", "date_only": false, "value": "2019-11-12T18:52:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-05-03T09:04:40Z", "date_only": false, "value": "2024-05-03T09:04:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pt_soft/270", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "d02aa8a9-3641-4e58-98da-4c651f8f91db", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/270", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 221178448.204588, "hours": 61438.457834607776, "days": 2559.9357431086573, "min_seconds": 221178448.204588, "max_seconds": 221178448.204588, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-11-12T18:52:54Z", "date_only": false, "value": "2019-11-12T18:52:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1385", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T17:20:22.204Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 141499222.204588, "hours": 39305.339501274444, "days": 1637.7224792197685, "min_seconds": 141412822.204588, "max_seconds": 141499222.204588, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-1385", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fbd1b775-5bcb-4adf-a1f5-0b4f3132d7ec", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T17:20:22.204Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 80036142.204588, "hours": 22232.261723496664, "days": 926.3442384790277, "min_seconds": 80036142.204588, "max_seconds": 80036142.204588, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-05-03T09:04:40Z", "date_only": false, "value": "2024-05-03T09:04:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pt_soft/270", "record": "CVE-2019-1385", "field": "creation_timestamp", "uuid": "d02aa8a9-3641-4e58-98da-4c651f8f91db", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/270", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T17:20:22.204Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}