CVE-2019-1168

4 documents4 sources
Severity
7.8HIGH
EPSS
0.3%
top 49.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
28
Microsoft Windows 10 Version 1507Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1703+25 more
Timeline
PublishedAug 14
Latest updateMay 24

Description

An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the p2pimsvc service handles processes these reque…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages28 packages

▶CVEListV5microsoft/windows_7_service_pack_16.1.0 — publication
▶CVEListV5microsoft/windows_server_2008_service_pack_26.0.0 — publication
▶CVEListV5microsoft/windows_server_2008_r2_service_pack_16.1.0 — publication

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j5p2-jf5p-h3rm: An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with↗2022-05-24
▶
CVEList
Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability↗2019-08-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability↗2019-08-13
▶