CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-10-10
Windows Error Reporting (WER) Hard Link Elevation of Privilege Vulnerability (CVE-2019-1315)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 with Windows Error Reporting (WER) enabled
[Impact] A local attacker can exploit hard links to overwrite or manipulate arbitrary system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft security patches and restrict local write permissions on temporary directories prior to patching