Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-1082

An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker w

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.The update addresses this vulnerability by requiring SYSTEM privileges for a certain DLL., aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1074.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows

  • 7 for 32-bit Systems Service Pack 1affected
  • 7 for x64-based Systems Service Pack 1affected
  • 8.1 for 32-bit systemsaffected
  • 8.1 for x64-based systemsaffected
  • RT 8.1affected
  • 10 for 32-bit Systemsaffected
  • 10 for x64-based Systemsaffected
  • 10 Version 1607 for 32-bit Systemsaffected
  • 10 Version 1607 for x64-based Systemsaffected

Microsoft Windows Server

  • 2008 R2 for x64-based Systems Service Pack 1 (Core installation)affected
  • 2008 R2 for Itanium-Based Systems Service Pack 1affected
  • 2008 R2 for x64-based Systems Service Pack 1affected
  • 2012affected
  • 2012 (Core installation)affected
  • 2012 R2affected
  • 2012 R2 (Core installation)affected
  • 2016affected
  • 2016 (Core installation)affected

References