CVE-2019-1213: falha crítica em Microsoft Windows Server 2008 Service Pack 2
Windows DHCP Server Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 4.2%
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server.
To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server.
The security update addresses the vulnerability by correcting how DHCP servers handle network packets.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Produtos afetados
Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)CVEs relacionadas — Microsoft Windows Server 2008 Service Pack 2
No mesmo produto, das mais perigosas para as menos.
CVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.8%KEVCVE-2023-36025HIGHWindows SmartScreen Security Feature Bypass VulnerabilityEPSS 88.2%KEVCVE-2025-33053HIGHInternet Shortcut Files Remote Code Execution VulnerabilityEPSS 87.1%KEVCVE-2021-1675HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 85.3%KEV