CVE-2019-1053

Windows Shell Elevation of Privilege Vulnerability

Medium · published June 12, 2019

CVSS v3.1
6.3
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox.

To exploit this vulnerability, an attacker would require unprivileged execution on the victim system.

The security update addresses the vulnerability by correctly validating folder shortcuts.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01265 · 69.5th percentile
Published
2019-06-12T13:49Z
EPSS history
Timeline
  • 12 JUN 13:49Z
    Windows Shell Elevation of Privilege Vulnerability
    cvelistv5