New Search

Windows Error Reporting Elevation of Privilege Vulnerability - CVE-2019-1037

oval:org.cisecurity:def:6420

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view change or delete data; or create new accounts with administrator privileges. To exploit the vulnerability an attacker must first gain unprivileged execution on a victim system. The security update addresses the vulnerability by correcting the way WER handles files.

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows 10
  • Microsoft Windows Server 2019
Class:
vulnerability
Reference(s):
  • CVE-2019-1037
  • MSRC-CVE-2019-1037
  • KB4507455
  • KB4507435
  • KB4507469
  • KB4507453
Product(s):