CVE-2019-0948— Windows Event Viewer Information Disclosure Vulnerability
Quick assessment
Affected
Microsoft Windows 10 Version 1803
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Windows Event Viewer是其中的一个事件查看器。 Microsoft Windows Event Viewer (eventvwr.msc)中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。以下
Public Exploits 1
ExploitDB · 1
EDB-40863 [local]
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-0948
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Windows Event Viewer Information Disclosure Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declaration.
To exploit the vulnerability, an attacker could create a file containing specially crafted XML content and convince an authenticated user to import the file.
The update addresses the vulnerability by modifying the way that the Event Viewer parses XML input.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Windows Event Viewer 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Windows Event Viewer是其中的一个事件查看器。 Microsoft Windows Event Viewer (eventvwr.msc)中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。以下
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2019-0948
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-0948
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-0948 (2)
-
https://www.zerodayinitiative.com/advisories/ZDI-19-641/ x_refsource_MISC
Same Patch Batch · Microsoft · 2019-06-12 · 88 CVEs total
| CVE-2019-0722 | 8.8 HIGH | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2019-0888 | 8.8 HIGH | ActiveX Data Objects (ADO) Remote Code Execution Vulnerability |
| CVE-2019-1019 | 8.5 HIGH | Microsoft Windows Security Feature Bypass Vulnerability |
| CVE-2019-1069 | 7.8 HIGH | Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2019-1022 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1064 | 7.8 HIGH | Windows Elevation of Privilege Vulnerability |
| CVE-2019-0998 | 7.8 HIGH | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-0985 | 7.8 HIGH | Microsoft Speech API Remote Code Execution Vulnerability |
| CVE-2019-1007 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1021 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1065 | 7.8 HIGH | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2019-0983 | 7.8 HIGH | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-0907 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-1026 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1027 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1028 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-0908 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0974 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0973 | 7.8 HIGH | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2019-1045 | 7.8 HIGH | Windows Network File System Elevation of Privilege Vulnerability |
Showing top 20 of 88 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Windows 10 Version 1803
-
CVE-2021-31194
OLE Automation Remote Code Execution Vulnerability -
CVE-2021-31193
Windows SSDP Service Elevation of Privilege Vulnerability -
CVE-2021-31191
Windows Projected File System FS Filter Driver Information D -
CVE-2021-31188
Windows Graphics Component Elevation of Privilege Vulnerabil -
CVE-2021-31187
Windows WalletService Elevation of Privilege Vulnerability
Same vendor: Microsoft
-
CVE-2026-96207
Microsoft Partner Center Elevation of Privilege Vulnerabilit -
CVE-2026-94510
Microsoft Bookings Elevation of Privilege Vulnerability -
CVE-2026-83947
Azure Event Grid Spoofing Vulnerability -
CVE-2026-88131
Microsoft Dataverse Remote Code Execution Vulnerability -
CVE-2026-83943
Azure API Center Information Disclosure Vulnerability
V. Comments for CVE-2019-0948
No comments yet