VULNERABILITY INTELLIGENCE

CVE-2019-1289

CVSS score5.5 MEDIUM
EPSS probability0.73%
CISA KEVNot currently listed
Published2019-09-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions, aka 'Windows Update Delivery Optimization Elevation of Privilege Vulnerability'.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references