CVE-2019-1188: fallo de gravedad alta en Microsoft Windows 10 Version 1709
LNK Remote Code Execution Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.5epss 3.7%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.
An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
The attacker could present to the user a removable drive, or remote share, that contains a malicious .LNK file and an associated malicious binary. When the user opens this drive(or remote share) in Windows Explorer, or any other application that parses the .LNK file, the malicious binary will execute code of the attacker’s choice, on the target system.
The security update addresses the vulnerability by correcting the processing of shortcut LNK references.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Productos afectados
Microsoft · Windows 10 Version 1709Microsoft · Windows 10 Version 1709 for 32-bit SystemsMicrosoft · Windows 10 Version 1803Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 1903 for 32-bit SystemsMicrosoft · Windows 10 Version 1903 for ARM64-based SystemsMicrosoft · Windows 10 Version 1903 for x64-based SystemsMicrosoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server, version 1803 (Server Core Installation)Microsoft · Windows Server, version 1903 (Server Core installation)CVEs relacionadas — Microsoft Windows 10 Version 1709
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-1732HIGHWindows Win32k Elevation of Privilege VulnerabilityEPSS 78.4%KEVCVE-2020-1054HIGHWin32k Elevation of Privilege VulnerabilityEPSS 53.9%KEVCVE-2020-1464HIGHWindows Spoofing VulnerabilityEPSS 38.9%KEVCVE-2021-28310HIGHWin32k Elevation of Privilege VulnerabilityEPSS 8.4%KEVCVE-2019-1064HIGHWindows Elevation of Privilege VulnerabilityEPSS 6.9%KEVCVE-2019-1069HIGHTask Scheduler Elevation of Privilege VulnerabilityEPSS 6.2%KEV