CVE-2019-1454 in Windows

Riassunto

di MITRE

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 26/11/2018
• Moderazione: accettato
• Voce: VDB-149312
• CPE: pronto
• CWE: CWE-269 (confermato)
• CVSS: 5.5 (NVD)
• EPSS: 0.00641
• KEV: no
• Attività: molto basso
• Settore: Police, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-1454
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-1454
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-1454/