CVEvulnerability
CVE-2019-1336
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1323.
Affected configurations
• microsoft windows 10 1809
• microsoft windows 10 1903
• microsoft windows server 2016 1903
• microsoft windows server 2019
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1336 Patch, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1336 Patch, Vendor Advisory