CVE-2019-0572

EUVD-2019-1339
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0573, CVE-2019-0574.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4480962
1607 (x64, x86)
KB4480961
1703 (x64, x86)
KB4480973
1709 (arm64, x64, x86)
KB4480978
1803 (arm64, x64, x86)
KB4480966
1809 (arm64, x64, x86)
KB4480116
Windows Server
1709 Server Core
KB4480978
1803 Server Core
KB4480966
Windows Server 2016
Server Core
KB4480961
Standard
KB4480961
Windows Server 2019
Server Core
KB4480116
Standard
KB4480116
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/106428
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0572
https://www.exploit-db.com/exploits/46157/
http://www.securityfocus.com/bid/106428
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0572
https://www.exploit-db.com/exploits/46157/