PT-2019-1153 · Microsoft · Windows Server 2016+9
Published
2019-01-08
·
Updated
2020-08-24
·
CVE-2019-0570
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Windows Server 2012 R2
Windows RT 8.1
Windows Server 2012
Windows Server 2019
Windows Server 2016
Windows 8.1
Windows 10
Windows 10 Servers
Description:
The issue arises from the Windows Runtime's improper handling of objects in memory. This can potentially allow an attacker to execute arbitrary code using a specially crafted application. The vulnerability may be exploited to affect the system.
Recommendations:
For Windows Server 2012 R2, update to a version that includes the fix for this issue.
For Windows RT 8.1, update to a version that includes the fix for this issue.
For Windows Server 2012, update to a version that includes the fix for this issue.
For Windows Server 2019, update to a version that includes the fix for this issue.
For Windows Server 2016, update to a version that includes the fix for this issue.
For Windows 8.1, update to a version that includes the fix for this issue.
For Windows 10, update to a version that includes the fix for this issue.
For Windows 10 Servers, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the Windows Runtime until a patch is available.
Exploit
Fix
LPE
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Windows
Windows 10
Windows 10 Servers
Windows 8.1
Windows Rt 8.1
Windows Runtime
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019