PT-2021-2277 · Microsoft · Windows 10 Update Assistant +1

Name of the Vulnerable Software and Affected Versions: Windows 10 Update Assistant affected versions not specified Description: The issue is related to improper access control in the Windows Update Assistant, which can be exploited to elevate privileges. This could allow an attacker to affect the...

The vulnerability of the Windows Update Assistant’s update handling mechanism, related to insecure privilege management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Windows Update Assistant’s update handling is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

CVE-2019-1378

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'...

CVE-2019-1378

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'...

CVE-2019-1378

CVE-2019-1378 is a local privilege escalation affecting Windows 10 Update Assistant. The vulnerability arises from how permissions are handled in the Update Assistant, allowing a locally authenticated attacker to elevate to SYSTEM and run arbitrary code. Microsoft’s advisory notes that the fix in...

Windows 10 Update Assistant Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; vie...

Microsoft Windows Update Assistant CVE-2019-1378 Local Privilege Escalation Vulnerability

Description Microsoft Windows Update Assistant is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the system. Technologies Affected Microsoft Windows Update Assistant Recommendations Permit local access for trusted individuals...