CVE-2019-1478

—

CVSS 3.1

7.8 high

EPSS

<1%p55

Published

Dec 10, 2019 (Dec 10, 2019)

Modified

Jun 17, 2026

Description

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.

Vendors: microsoft
Products: windows 7, windows server 2008
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news1 stories

Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosDec 10, 18:41 UTC · Dec 10, 2019Vulnerability CVE-2019-1468 CVE-2019-1471 CVE-2019-1458+22 CVEs