CVEvulnerability

CVE-2019-13208

7.3 HIGH Published 2019-07-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.3 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-732

Description

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0.

Affected configurations

• maxx waves maxx audio 1.9.29.0

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References