VULNERABILITY INTELLIGENCE

CVE-2019-1378

CVSS score7.8 HIGH
EPSS probability1.31%
CISA KEVNot currently listed
Published2019-10-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references