CVE-2019-1289

—

CVSS 3.1

5.5 medium

EPSS

<1%p52

Published

Sep 11, 2019 (Sep 11, 2019)

Modified

Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions, aka 'Windows Update Delivery Optimization Elevation of Privilege Vulnerability'.

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Weakness: CWE-863
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.