CVE-2019-1186

CVE Modified - Description

09:18 PM

- An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the wcmsvc.dll properly handles objects in memory.

+ An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the wcmsvc.dll properly handles objects in memory.

CVE Modified - Reference

04:36 AM

- -

+ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1186

CVE Modified - CVSS V3.1

05:16 PM

- -

+ Microsoft Corporation AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE Modified - CVSS V3

05:16 PM

- NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

+ -

CVE Modified - Description

05:16 PM

- An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1178, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184.

+ An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the wcmsvc.dll properly handles objects in memory.

CWE Remap - CWE

05:37 PM

- CWE-264

+ NVD-CWE-noinfo

Initial Analysis - CPE Configuration

06:04 PM

- -

+ OR *cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

Initial Analysis - CWE

06:04 PM

- -

+ CWE-264

Initial Analysis - Reference Type

06:04 PM

- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1186 No Types Assigned

+ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1186 Patch, Vendor Advisory

Initial Analysis - CVSS V3

06:04 PM

- -

+ AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Initial Analysis - CVSS V2

06:04 PM

- -

+ (AV:L/AC:L/Au:N/C:P/I:P/A:P)