Skip to content
NewA calmer, faster ZeroHour

CVE-2019-1174

CVSS 3.1
7.0 high
EPSS
<1%p51
Published
·
Modified
Analyze CVE-2019-1174 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the PsmServiceExtHost.dll properly handles objects in memory.

Vendors
microsoft
Products
windows 10, windows server 2016, windows server 2019
Weakness
CWE-1257
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

1 story