CVE-2019-1454 in Windows

Sumário

de MITRE

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 26/11/2018
• Moderação: aceite
• Entrada: VDB-149312
• CPE: pronto
• CWE: CWE-269 (confirmado)
• CVSS: 5.5 (NVD)
• EPSS: 0.00641
• KEV: não
• Atividades: muito baixo
• Sector: Police, Government, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-1454
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-1454
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-1454/