CVE-2019-1478 — Microsoft Windows vulnerability

6 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.4%
top 39.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft WindowsMicrosoft Windows ServerMicrosoft Windows Server 2008
Timeline
PublishedDec 10
Latest updateMay 24

Description

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5microsoft/windows_server8 versions+7
▶CVEListV5microsoft/windows7 for 32-bit Systems Service Pack 1, 7 for x64-based Systems Service Pack 1+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-h259-mpwp-25ww: An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vul↗2022-05-24
▶
CVEList
CVE-2019-1478: An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vul↗2019-12-10
▶

📋Vendor Advisories

1
Microsoft
Windows COM Server Elevation of Privilege Vulnerability↗2019-12-10
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage↗2019-12-10
▶
Talos
Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage↗2019-12-10
▶
CVE-2019-1478 — Microsoft Windows vulnerability | cvebase