Skip to content
OpenAdvisories
Unscored CVE-2019-1272 EUVD-2019-9837GHSA-pmgg-r9mr-52mp

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker wh…

Published Sep 11, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Description

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1269.

Affected products

VendorProductAffectedFixed
Microsoft Windows 10 for 32-bit Systems, 10 for x64-based Systems, 10 Version 1607 for 32-bit Systems, 10 Version 1607 for x64-based Systems, 10 Version 1703 for 32-bit Systems, 10 Version 1703 for x64-based Systems, 10 Version 1709 for 32-bit Systems, 10 Version 1709 for x64-based Systems, 10 Version 1803 for 32-bi… —
Microsoft Windows Server 2016, 2016 (Core installation), version 1803 (Core Installation), 2019, 2019 (Core installation) —
Microsoft Windows 10 Version 1903 for 32-bit Systems unspecified —
Microsoft Windows 10 Version 1903 for x64-based Systems unspecified —
Microsoft Windows 10 Version 1903 for ARM64-based Systems unspecified —
Microsoft Windows Server, version 1903 (Server Core installation) unspecified —

References