← back
CVE-2019-1177

Windows Elevation of Privilege Vulnerability

CVSS 7 HIGHEPSS 0.7%CWE-269
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7EPSS 0.7%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
14 Aug 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the rpcss.dll properly handles objects in memory.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →