CVE-2019-1074
MEDIUMWindows 10 and Windows Server 2016/2019 - Elevation of Privilege via Symbolic Link Attack
Title source: llmDescription
An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege, are vulnerable to symbolic link attack. An attacker who successfully exploited this vulnerability could potentially access unauthorized information. The update addresses this vulnerability by not allowing symbolic links in these scenarios., aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1082.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1074
Scores
CVSS v3
5.5
EPSS
0.0162
EPSS Percentile
72.9%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-59
Status
published
Products (7)
microsoft/windows_10
1709
microsoft/windows_10
1803
microsoft/windows_10
1809
microsoft/windows_10
1903
microsoft/windows_server_2016
1803
microsoft/windows_server_2016
1903
microsoft/windows_server_2019
Published
Jul 15, 2019
Tracked Since
Feb 18, 2026