VULNERABILITY INTELLIGENCE

CVE-2019-19470

CVSS score7.8 HIGH

EPSS probability0.92%

CISA KEVNot currently listed

Published2019-12-30

Last modified2026-06-17

Description

Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and including 2.1.12. Fixed in version 2.1.13.