CVE-2019-0552

8.8HIGH

Key Information:

Vendor
Microsoft
Status
Windows Server 2012 R2
Windows Rt 8.1
Windows Server 2019
Windows Server 2016
Vendor
CVE Published:
8 January 2019

Summary

An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

Affected Version(s)

Windows 10 32-bit Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

References

https://www.exploit-db.com/exploits/46162/
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/106407
vdb-entryx_refsource_BID
https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM

EPSS Score

61% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.