CVE-2019-0998

HIGH

Microsoft Windows Storage Service - Elevation of Privilege

Title source: llm
STIX 2.1

Description

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application. The security update addresses the vulnerability by correcting how the Storage Services handles file operations.

Scores

CVSS v3 7.8
EPSS 0.0107
EPSS Percentile 61.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (7)
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_server_2016 1803
microsoft/windows_server_2016 1903
microsoft/windows_server_2019
Published Jun 12, 2019
Tracked Since Feb 18, 2026