PT-2019-2319 · Microsoft · Windows Defender Application Control+1

Matt Graeber · Published 2019-05-14 · Updated 2020-08-24 · CVE-2019-0733

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Windows Defender Application Control (WDAC) (affected versions not specified)

Description A security feature bypass issue exists, potentially allowing an attacker to bypass enforcement mechanisms. This could impact the integrity, confidentiality, and availability of protected information. The vulnerability is related to errors in security settings and may allow an attacker to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2019-02090

CVE-2019-0733

Affected Products

Windows

Windows Defender Application Control

References · 6

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0733 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0733 · Security Note
• https://bdu.fstec.ru/vul/2019-02090 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0733 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0733 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0733 · Vendor Advisory