VULNERABILITY INTELLIGENCE

CVE-2019-1053

CVSS score6.3 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2019-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Description

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the victim system. The security update addresses the vulnerability by correctly validating folder shortcuts.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references