7.8

CVE-2019-0880

Warnung

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MicrosoftWindows 10 1507 Version- HwPlatformx64
MicrosoftWindows 10 1507 Version- HwPlatformx86
MicrosoftWindows 10 1607 Version- HwPlatformx64
MicrosoftWindows 10 1607 Version- HwPlatformx86
MicrosoftWindows 10 1703 Version- HwPlatformx64
MicrosoftWindows 10 1703 Version- HwPlatformx86
MicrosoftWindows 10 1709 Version- HwPlatformarm64
MicrosoftWindows 10 1709 Version- HwPlatformx64
MicrosoftWindows 10 1709 Version- HwPlatformx86
MicrosoftWindows 10 1803 Version- HwPlatformarm64
MicrosoftWindows 10 1803 Version- HwPlatformx64
MicrosoftWindows 10 1803 Version- HwPlatformx86
MicrosoftWindows 10 1809 Version- HwPlatformarm64
MicrosoftWindows 10 1809 Version- HwPlatformx64
MicrosoftWindows 10 1809 Version- HwPlatformx86
MicrosoftWindows 10 1903 Version- HwPlatformarm64
MicrosoftWindows 10 1903 Version- HwPlatformx64
MicrosoftWindows 10 1903 Version- HwPlatformx86
MicrosoftWindows 8.1 Version-
MicrosoftWindows Rt 8.1 Version-
MicrosoftWindows Server 1903 Version- HwPlatformx64

23.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Privilege Escalation Vulnerability

Schwachstelle

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.37% 0.794
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H