CVE-2019-0786 — Microsoft / Windows

Description (CNA)

An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.

Affected (CNA)

Vendor / product	Versions
Microsoft / Windows	affected 10 Version 1709 for 32-bit Systems; affected 10 Version 1709 for x64-based Systems; affected 10 Version 1803 for 32-bit Systems; affected 10 Version 1803 for x64-based Systems; affected 10 Version 1803 for ARM64-based Systems; affected 10 Version 1809 for 32-bit Systems; affected 10 Version 1809 for x64-based Systems; affected 10 Version 1809 for ARM64-based Systems; affected 10 Version 1709 for ARM64-based Systems
Microsoft / Windows Server	affected version 1709 (Core Installation); affected version 1803 (Core Installation); affected 2019; affected 2019 (Core installation)

Vendor / product

Versions

Microsoft / Windows

affected 10 Version 1709 for 32-bit Systems; affected 10 Version 1709 for x64-based Systems; affected 10 Version 1803 for 32-bit Systems; affected 10 Version 1803 for x64-based Systems; affected 10 Version 1803 for ARM64-based Systems; affected 10 Version 1809 for 32-bit Systems; affected 10 Version 1809 for x64-based Systems; affected 10 Version 1809 for ARM64-based Systems; affected 10 Version 1709 for ARM64-based Systems

Microsoft / Windows Server

affected version 1709 (Core Installation); affected version 1803 (Core Installation); affected 2019; affected 2019 (Core installation)

CWE

No CWE identifiers supplied.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0786

ADP enrichment

CVE

No English description supplied.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0786