Skip to content
NewA calmer, faster ZeroHour

CVE-2019-1178

CVSS 3.1
7.0 high
EPSS
<1%p55
Published
·
Modified
Analyze CVE-2019-1178 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the ssdpsrv.dll properly handles objects in memory.

Vendors
microsoft
Products
windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

1 story