CVE-2019-0786

Summary

An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows10 Version 1709 for 32-bit Systemsaffected
MicrosoftWindows10 Version 1709 for x64-based Systemsaffected
MicrosoftWindows10 Version 1803 for 32-bit Systemsaffected
MicrosoftWindows10 Version 1803 for x64-based Systemsaffected
MicrosoftWindows10 Version 1803 for ARM64-based Systemsaffected
MicrosoftWindows10 Version 1809 for 32-bit Systemsaffected
MicrosoftWindows10 Version 1809 for x64-based Systemsaffected
MicrosoftWindows10 Version 1809 for ARM64-based Systemsaffected
MicrosoftWindows10 Version 1709 for ARM64-based Systemsaffected
MicrosoftWindows Serverversion 1709 (Core Installation)affected
MicrosoftWindows Serverversion 1803 (Core Installation)affected
MicrosoftWindows Server2019affected
MicrosoftWindows Server2019 (Core installation)affected

Weaknesses

  • Remote Code Execution

ADP Enrichment

CVE Program Container

Additional References

References