CVE-2019-0572

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0573, CVE-2019-0574.

Affected

Microsoft · Windows Server 2016 · Windows 10 · Windows Server 2019 · Windows 10 Servers

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

25.14% chance of exploitation in the next 30 days, 98th percentile

Published

2019-01-08

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46157

Security advisories

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0572
• http://www.securityfocus.com/bid/106428

References

• CVE Record
• NVD entry