Microsoft Windows CVE-2019-1064 Local Privilege Escalation Vulnerability
BID:108587
Info
Microsoft Windows CVE-2019-1064 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 108587 |
| Class: | Design Error |
| CVE: |
CVE-2019-1064 |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 11 2019 12:00AM |
| Updated: | Jun 13 2019 06:00AM |
| Credit: | Microsoft |
| Vulnerable: |
Microsoft Windows Server 2019 0 Microsoft Windows Server 2016 0 Microsoft Windows Server 1903 0 Microsoft Windows Server 1803 0 Microsoft Windows 10 Version 1903 for x64-based Systems 0 Microsoft Windows 10 Version 1903 for ARM64-based Systems 0 Microsoft Windows 10 Version 1903 for 32-bit Systems 0 Microsoft Windows 10 Version 1809 for x64-based Systems 0 Microsoft Windows 10 Version 1809 for ARM64-based Systems 0 Microsoft Windows 10 Version 1809 for 32-bit Systems 0 Microsoft Windows 10 Version 1803 for x64-based Systems 0 Microsoft Windows 10 Version 1803 for ARM64-based Systems 0 Microsoft Windows 10 Version 1803 for 32-bit Systems 0 Microsoft Windows 10 version 1709 for x64-based Systems 0 Microsoft Windows 10 Version 1709 for ARM64-based Systems 0 Microsoft Windows 10 version 1709 for 32-bit Systems 0 Microsoft Windows 10 version 1703 for x64-based Systems 0 Microsoft Windows 10 version 1703 for 32-bit Systems 0 Microsoft Windows 10 Version 1607 for x64-based Systems 0 Microsoft Windows 10 Version 1607 for 32-bit Systems 0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows CVE-2019-1064 Local Privilege Escalation Vulnerability
Microsoft Windows is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to gain elevated privileges.
Microsoft Windows is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to gain elevated privileges.
Exploit / POC
Microsoft Windows CVE-2019-1064 Local Privilege Escalation Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
Microsoft Windows CVE-2019-1064 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft Windows CVE-2019-1064 Local Privilege Escalation Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- Researcher publishes Windows zero-days for the third day in a row (zdnet.com)
- CVE-2019-1064 | Windows Elevation of Privilege Vulnerability (Microsoft)