Skip to content
OpenAdvisories
High · 7.3 CVE-2019-1185 EUVD-2019-9756GHSA-hc8w-p2wf-g46r

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Published Aug 14, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Description

An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.

Affected products

VendorProductAffectedFixed
Microsoft Windows 10 Version 1903 for 32-bit Systems 10.0.0 – < publication publication
Microsoft Windows 10 Version 1903 for x64-based Systems 10.0.0 – < publication publication
Microsoft Windows 10 Version 1903 for ARM64-based Systems 10.0.0 – < publication publication
Microsoft Windows Server, version 1903 (Server Core installation) 10.0.0 – < publication publication

References