CVE-2019-1159— Microsoft Windows和Windows Server 权限许可和访问控制问题漏洞

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A

Microsoft Windows和Windows Server 权限许可和访问控制问题漏洞

Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Windows Kernel是其中的一个Windows系统内核。 Microsoft Windows kernel中存在提权漏洞，该漏洞源于程序无法正确处理内存中的对象。攻击者可通过登录到系统并运行特制的应用程序利用该漏洞在内核模式中运行任意代码

N/A

N/A