CVE-2019-19115

HIGH

Nahimic APO Software Component Driver <1.6.2 - Privilege Escalation

Title source: llm

Description

An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1.5.1, 1.6.1 and 1.6.2 allows an attacker to execute code with SYSTEM privileges.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://safebreach.com/Post/Nahimic-APO-Software-Component-Driver-Deployed-with-MSI-Computers-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-19115

Scores

CVSS v3 7.8

EPSS 0.0057

EPSS Percentile 42.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-427

Status published

Products (5)

nahimic/apo_software_component 1.4.2

nahimic/apo_software_component 1.5.0

nahimic/apo_software_component 1.5.1

nahimic/apo_software_component 1.6.1

nahimic/apo_software_component 1.6.2

Published Oct 08, 2020

Tracked Since Feb 18, 2026