CVE-2019-1198 — Microsoft Windows 10 Version 1507 vulnerability

4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 35.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
Microsoft Windows 10 Version 1507Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1703+10 more
Timeline
PublishedAug 14
Latest updateMay 24

Description

An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and anothe…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:LExploitability: 2.2 | Impact: 3.7

Affected Packages14 packages

▶CVEListV5microsoft/windows_server_201610.0.0 — publication
▶CVEListV5microsoft/windows_server_201910.0.0 — publication
▶CVEListV5microsoft/windows_10_version_150710.0.0 — publication
▶CVEListV5microsoft/windows_10_version_160710.0.0 — publication
▶CVEListV5microsoft/windows_10_version_170310.0.0 — publication

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gc4p-7pvj-6r87: An elevation of privilege exists in SyncController↗2022-05-24
▶
CVEList
Microsoft Windows Elevation of Privilege Vulnerability↗2019-08-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Windows Elevation of Privilege Vulnerability↗2019-08-13
▶
CVE-2019-1198 — Microsoft vulnerability | cvebase