CVE-2019-0863

EUVD-2019-1612
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10_1507
-
microsoftwindows_10_1507
-
microsoftwindows_10_1607
-
microsoftwindows_10_1607
-
microsoftwindows_10_1703
-
microsoftwindows_10_1703
-
microsoftwindows_10_1709
-
microsoftwindows_10_1709
-
microsoftwindows_10_1709
-
microsoftwindows_10_1803
-
microsoftwindows_10_1803
-
microsoftwindows_10_1803
-
microsoftwindows_10_1809
-
microsoftwindows_10_1809
-
microsoftwindows_10_1809
-
microsoftwindows_10_1903
-
microsoftwindows_10_1903
-
microsoftwindows_10_1903
-
microsoftwindows_7
-
microsoftwindows_8.1
-
microsoftwindows_rt_8.1
-
microsoftwindows_server_1803
-
microsoftwindows_server_1903
-
microsoftwindows_server_2012
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4499154
1607 (x64, x86)
KB4494440
1703 (x64, x86)
KB4499181
1709 (arm64, x64, x86)
KB4499179
1803 (arm64, x64, x86)
KB4499167
1809 (arm64, x64, x86)
KB4494441
1903 (arm64, x64, x86)
KB4497936
Windows 7
Service Pack 1 (x64, x86)
KB4499175
Windows 8.1
(x64, x86)
KB4499165
Windows RT 8.1
All
KB4499151
Windows Server
1803 Server Core
KB4499167
1903 Server Core
KB4497936
Windows Server 2008 R2
Service Pack 1 (x64)
KB4499175
Service Pack 1 Server Core (x64)
KB4499175
Windows Server 2012
Server Core
KB4499171
Standard
KB4499171
Windows Server 2012 R2
Server Core
KB4499165
Standard
KB4499165
Windows Server 2016
Server Core
KB4494440
Standard
KB4494440
Windows Server 2019
Server Core
KB4494441
Standard
KB4494441
References
http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863
http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0863