packetstormsecurity.com
http://packetstormsecurity.com/files/152532/Microsoft-Windows-CSRSS-SxSSrv-Cached-Manifest-Privilege-Escalation.html CVE-2019-0735
HIGH
Microsoft Windows 10 1809 / 1709 - CSRSS SxSSrv Cached Manifest Privilege Escalation
Record summary
CVE-2019-0735 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit.
Description
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
WindowsBrowse Microsoft / Windows | CVE List | 7 for 32-bit Systems Service Pack 1 | affected |
| 7 for x64-based Systems Service Pack 1 | affected | ||
| 8.1 for 32-bit systems | affected | ||
| 8.1 for x64-based systems | affected | ||
| RT 8.1 | affected | ||
| 10 for 32-bit Systems | affected | ||
| 10 for x64-based Systems | affected | ||
| 10 Version 1607 for 32-bit Systems | affected | ||
| 10 Version 1607 for x64-based Systems | affected | ||
| 10 Version 1703 for 32-bit Systems | affected | ||
| 10 Version 1703 for x64-based Systems | affected | ||
| 10 Version 1709 for 32-bit Systems | affected | ||
| Showing 12 of 20 version ranges | |||
Windows ServerBrowse Microsoft / Windows Server | CVE List | 2008 R2 for x64-based Systems Service Pack 1 (Core installation) | affected |
| 2008 R2 for Itanium-Based Systems Service Pack 1 | affected | ||
| 2008 R2 for x64-based Systems Service Pack 1 | affected | ||
| 2008 for 32-bit Systems Service Pack 2 (Core installation) | affected | ||
| 2012 | affected | ||
| 2012 (Core installation) | affected | ||
| 2012 R2 | affected | ||
| 2012 R2 (Core installation) | affected | ||
| 2016 | affected | ||
| 2016 (Core installation) | affected | ||
| version 1709 (Core Installation) | affected | ||
| version 1803 (Core Installation) | affected | ||
| Showing 12 of 18 version ranges | |||
Proofs of concept
1Catalogued exploits
ExploitDBMicrosoft Windows 10 1809 / 1709 - CSRSS SxSSrv Cached Manifest Privilege EscalationExploitDB exploitby Google Security ResearchNot analyzed1 file
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-0735 portal.msrc.microsoft.com
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0735 46712exploit
https://www.exploit-db.com/exploits/46712