Windows Elevation of Privilege Vulnerability

🗓️ 09 Apr 2019 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 28 Views

Windows elevation of privilege vulnerability in LUAFV driver. Allows running arbitrary code in local system's security context. Attackers can install programs, view, change, or delete data, and create new accounts

Reporter	Title	Published	Views	Family All 60
0day.today	Microsoft Windows 10 1809 LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation	16 Apr 201900:00	–	zdt
ATTACKERKB	CVE-2019-0841	9 Apr 201900:00	–	attackerkb
ATTACKERKB	CVE-2019-0841: AppXSvc Hard Link Privilege Escalation	9 Apr 201900:00	–	attackerkb
Circl	CVE-2019-0805	16 Apr 201900:00	–	circl
Check Point Advisories	Microsoft Windows LUAFV Elevation of Privilege (CVE-2019-0805)	9 Apr 201900:00	–	checkpoint_advisories
CVE	CVE-2019-0805	9 Apr 201920:15	–	cve
Cvelist	CVE-2019-0805	9 Apr 201920:15	–	cvelist
EUVD	EUVD-2019-1561	7 Oct 202500:30	–	euvd
Microsoft KB	April 9, 2019—KB4493441 (OS Build 16299.1087)	9 Apr 201907:00	–	mskb
Microsoft KB	April 9, 2019—KB4493446 (Monthly Rollup)	9 Apr 201907:00	–	mskb

Vulners

Node

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1709_(server_core_installation)

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

09 Apr 2019 07:00Current

2.9Low risk

Vulners AI Score2.9

CVSS 24.6

CVSS 36.7 - 7.8

EPSS0.00303

windows elevation of privilege luafv driver arbitrary code security context local system attackers install programs view data change data delete data create accounts