packetstormsecurity.com
http://packetstormsecurity.com/files/152533/Microsoft-Windows-LUAFV-Delayed-Virtualization-MAXIMUM_ACCESS-DesiredAccess-Privilege-Escalation.html CVE-2019-0730
HIGH
Microsoft Windows 10 1809 - LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation
Record summary
CVE-2019-0730 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit.
Description
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
WindowsBrowse Microsoft / Windows | CVE List | 7 for 32-bit Systems Service Pack 1 | affected |
| 7 for x64-based Systems Service Pack 1 | affected | ||
| 8.1 for 32-bit systems | affected | ||
| 8.1 for x64-based systems | affected | ||
| RT 8.1 | affected | ||
| 10 for 32-bit Systems | affected | ||
| 10 for x64-based Systems | affected | ||
| 10 Version 1607 for 32-bit Systems | affected | ||
| 10 Version 1607 for x64-based Systems | affected | ||
| 10 Version 1703 for 32-bit Systems | affected | ||
| 10 Version 1703 for x64-based Systems | affected | ||
| 10 Version 1709 for 32-bit Systems | affected | ||
| Showing 12 of 20 version ranges | |||
Windows ServerBrowse Microsoft / Windows Server | CVE List | 2008 R2 for x64-based Systems Service Pack 1 (Core installation) | affected |
| 2008 R2 for Itanium-Based Systems Service Pack 1 | affected | ||
| 2008 R2 for x64-based Systems Service Pack 1 | affected | ||
| 2008 for 32-bit Systems Service Pack 2 (Core installation) | affected | ||
| 2012 | affected | ||
| 2012 (Core installation) | affected | ||
| 2012 R2 | affected | ||
| 2012 R2 (Core installation) | affected | ||
| 2016 | affected | ||
| 2016 (Core installation) | affected | ||
| version 1709 (Core Installation) | affected | ||
| version 1803 (Core Installation) | affected | ||
| Showing 12 of 18 version ranges | |||
Proofs of concept
1Catalogued exploits
ExploitDBMicrosoft Windows 10 1809 - LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege EscalationExploitDB exploitby Google Security ResearchNot analyzed1 file
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-0730 portal.msrc.microsoft.com
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0730 46713exploit
https://www.exploit-db.com/exploits/46713