Remote Code Execution Vulnerability in Windows Jet Database Engine
CVE-2019-0538

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows Server 2008
Windows Server 2012
Windows 10
Windows 8.1
Vendor
CVE Published:
8 January 2019

What is CVE-2019-0538?

The Windows Jet Database Engine has a vulnerability that allows remote code execution via improper memory handling. Attackers could exploit this vulnerability to execute arbitrary code on a vulnerable system, leading to potential unauthorized access and control. A successful exploit could facilitate malicious activities, including the installation of programs, viewing, changing, or deleting data. Users are urged to apply the patch provided by Microsoft to mitigate this risk and ensure their systems remain secure.

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/106419
vdb-entryx_refsource_BID

EPSS Score

60% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.