CVE-2019-0766 — Microsoft Windows vulnerability

4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 54.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
21
Microsoft WindowsMicrosoft Windows ServerMicrosoft Windows 10+18 more
Timeline
PublishedApr 9
Latest updateMay 13

Description

An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages21 packages

▶CVEListV5microsoft/windows_server6 versions+5
▶CVEListV5microsoft/windows13 versions+12
▶NVDmicrosoft/windows1709, 1803+1
▶NVDmicrosoft/windows_105 versions+4

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-xp4j-5j7j-4gp5: An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations↗2022-05-13
▶

📋Vendor Advisories

1
Microsoft
Microsoft Windows Elevation of Privilege Vulnerability↗2019-03-12
▶

🕵️Threat Intelligence

1
Fortinet
RPC Bug Hunting Case Studies – Part 2↗2019-04-02
▶
CVE-2019-0766 — Microsoft Windows vulnerability | cvebase