Windows Error Reporting Elevation of Privilege Vulnerability - CVE-2019-0863ID: oval:org.secpod.oval:def:54709 | Date: (C)2019-05-15 (M)2024-03-06 |
Class: VULNERABILITY | Family: windows |
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges.To exploit the vulnerability, an attacker must first gain unprivileged execution on a victim system.The security update addresses the vulnerability by correcting the way WER handles files.
Platform: |
Microsoft Windows Server |
Microsoft Windows 10 |
Microsoft Windows 7 |
Microsoft Windows 8.1 |
Microsoft Windows Server 2008 R2 |
Microsoft Windows Server 2012 |
Microsoft Windows Server 2012 R2 |
Microsoft Windows Server 2016 |
Microsoft Windows Server 2019 |