CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-11-12
Windows Certificate Dialog Elevation of Privilege Vulnerability (CVE-2019-1388) Deep Dive & Mitigation Guide
[Affected Scope] Multiple legacy Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local authenticated attacker can bypass User Account Control (UAC) and execute arbitrary code with NT AUTHORITY\SYSTEM privileges by exploiting a design flaw in the Windows Certificate Dialog
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict UAC behavior and standard user privileges if patching is delayed