CVE-2019-1388
CVE-2019-1388
In short
A flaw in Windows' certificate dialog allows unprivileged users to gain elevated (admin) privileges by exploiting improper permission checks. An attacker can abuse the dialog to run commands with higher privileges than their account allows.
Technical detail
CWE-269 improper privilege management in Windows Certificate Dialog fails to enforce privilege restrictions. An attacker with standard user privileges can interact with the certificate dialog component to escalate to administrator-level execution; exploitation requires local access and user interaction with the vulnerable dialog.
Summary generated and translated by AI from the official description.
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Microsoft · WindowsMicrosoft · Windows 10 Version 1903 for 32-bit SystemsMicrosoft · Windows 10 Version 1903 for ARM64-based SystemsMicrosoft · Windows 10 Version 1903 for x64-based SystemsMicrosoft · Windows ServerMicrosoft · Windows Server, version 1903 (Server Core installation)public PoCs found — 5
githubgithub.com/jas502n/CVE-2019-1388★ 193githubgithub.com/sv3nbeast/CVE-2019-1388★ 72githubgithub.com/nobodyatall648/CVE-2019-1388★ 20githubgithub.com/suprise4u/CVE-2019-1388★ 7githubgithub.com/jaychouzzk/CVE-2019-1388★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →