Winlogon Elevation of Privilege Vulnerability

🗓️ 10 Sep 2019 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 59 Views

Winlogon Elevation of Privilege Vulnerability, Allows attackers to run arbitrary code and gain full user rights, Update corrects Winlogon handling of path

Reporter	Title	Published	Views	Family All 48
CNVD	Microsoft Windows Winlogon Privilege Mobilization Vulnerability	12 Sep 201900:00	–	cnvd
CVE	CVE-2019-1268	11 Sep 201921:25	–	cve
Cvelist	CVE-2019-1268	11 Sep 201921:25	–	cvelist
EUVD	EUVD-2019-9833	7 Oct 202500:30	–	euvd
Microsoft KB	September 10, 2019—KB4512578 (OS Build 17763.737)	10 Sep 201907:00	–	mskb
Microsoft KB	September 10, 2019—KB4515384 (OS Build 18362.356)	10 Sep 201907:00	–	mskb
Microsoft KB	September 10, 2019—KB4516026 (Monthly Rollup)	10 Sep 201907:00	–	mskb
Microsoft KB	September 10, 2019—KB4516033 (Security-only update)	12 Nov 201908:00	–	mskb
Microsoft KB	September 10, 2019—KB4516044 (OS Build 14393.3204)	10 Sep 201907:00	–	mskb
Microsoft KB	September 10, 2019—KB4516051 (Security-only update)	10 Sep 201907:00	–	mskb

Vulners

Node

microsoft windows_server_2008_sp2x64

OR

microsoft windows_server_2008_sp2x64

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1x64

OR

microsoft windows_8.1x64

OR

microsoft windows_8.1x86

OR

microsoft windows_8.1x86

OR

microsoft windows_7x64

OR

microsoft windows_7x64

OR

microsoft windows_10_1809x64

OR

microsoft windows_10_1809x64

OR

microsoft windows_10_1809x86

OR

microsoft windows_10_1803x64

OR

microsoft windows_server_1803

OR

microsoft windows_10_1803x64

OR

microsoft windows_10_1809x64

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2itanium

OR

microsoft windows_server_2008_r2itanium

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008itanium

OR

microsoft windows_server_2008itanium

OR

microsoft windows_server_2008_sp2x64

OR

microsoft windows_server_2008_sp2x64

OR

microsoft windows_7x86

OR

microsoft windows_7x86

OR

microsoft windows_server_2016

OR

microsoft windows_server_2016

OR

microsoft windows_10_1607x64

OR

microsoft windows_10_1607x86

OR

microsoft windows_10_1507x64

OR

microsoft windows_10_1507x86

OR

microsoft windows_server_1903

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_server_2019

OR

microsoft windows_server_2019

10 Sep 2019 07:00Current

2.6Low risk

Vulners AI Score2.6

CVSS 27.2

CVSS 3.17.8

CVSS 36.5

EPSS0.00372

winlogon elevation of privilege arbitrary code full user rights system exploitation path handling vulnerability correction microsoft