VULNERABILITY INTELLIGENCE

CVE-2019-13208

CVSS score7.3 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2019-07-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0.

Weakness classification

  • nvd@nist.gov: CWE-732

Primary references