CVE-2019-0572

HIGH

Windows Data Sharing Service - Privilege Escalation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-0572. PoCs published by Google Security Research.

AI-analyzed exploit summary The exploit leverages a hard link vulnerability in the Data Sharing Service (DSSVC) on Windows 10 1803/1809, allowing a user to open arbitrary files with SYSTEM privileges by manipulating file hard links. The PoC demonstrates arbitrary file write access via DSOpenSharedFile, bypassing path verification checks.

Description

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0573, CVE-2019-0574.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textlocalwindows

https://www.exploit-db.com/exploits/46157

View Code ZIP pw:eip

The exploit leverages a hard link vulnerability in the Data Sharing Service (DSSVC) on Windows 10 1803/1809, allowing a user to open arbitrary files with SYSTEM privileges by manipulating file hard links. The PoC demonstrates arbitrary file write access via DSOpenSharedFile, bypassing path verification checks.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Windows 10 1803 and 1809 (Data Sharing Service)

Auth required

Prerequisites: User access to create hard links · Target file accessible by SYSTEM · Data Sharing Service running

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548.002 - Bypass User Account Control

devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3

Core References

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/46157/

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0572

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106428

Scores

CVSS v3 7.8

EPSS 0.2514

EPSS Percentile 97.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-59

Status published

Products (10)

microsoft/windows_10

microsoft/windows_10 1607

microsoft/windows_10 1703

microsoft/windows_10 1709

microsoft/windows_10 1803

microsoft/windows_10 1809

microsoft/windows_server_2016

microsoft/windows_server_2016 1709

microsoft/windows_server_2016 1803

microsoft/windows_server_2019

Published Jan 08, 2019

Tracked Since Feb 18, 2026