Elevation of Privilege Vulnerability in Microsoft XmlDocument Class Affecting Windows Products
CVE-2019-0555

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows Server 2012
Windows 10
Windows 8.1
Windows Server 2016
Vendor
CVE Published:
8 January 2019

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2019-0555?

An elevation of privilege vulnerability arises within Microsoft’s XmlDocument class. This security flaw can potentially enable attackers to escape from the AppContainer sandbox in web browsers, thus compromising the integrity and security of the affected systems. It is critical for Windows users and administrators to be aware of this vulnerability, which affects multiple versions of Windows Server and Windows 10, allowing for unauthorized access if exploited.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-0555 - Proof of Concept

TriBell_Edge_SandBox_Escape
Created by kai6u

References

https://www.exploit-db.com/exploits/46185/
exploitx_refsource_EXPLOIT-DB
https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/106395
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.