CVE-2019-1378

EPSS 1.2%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 oct 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.

Productos afectados

Microsoft · Windows Update Assistant

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1378