VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 12, 2019· Updated Jun 17, 2026

CVE-2019-1007

CVE-2019-1007

Description

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running. The update addresses the vulnerability by correcting how the Windows Audio Service handles processes these requests.

Affected products

28
  • Microsoft/Windows 10 19098 versions
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
    • (no CPE)range: 10.0.10240.0
  • Microsoft/Windows Server 20164 versions
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
    • (no CPE)range: 10.0.14393.0
  • Microsoft/Windows Server 20192 versions
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
    • (no CPE)range: 10.0.17763.0
  • Microsoft/Windows Audio Servicellm-fuzzy
  • Microsoft/Windows 10 1607cpe-rescue
    Range: 10.0.14393.0
  • Microsoft/Windows 10 1511cpe-rescue
    Range: 10.0.0
  • Microsoft/Windows Server version 1709cpe-rescue
    Range: 10.0.0
  • Microsoft/Windows 10 Version 1709 for 32-bit Systemsv5
    Range: 10.0.0
  • Microsoft/Windows 10 Version 1803v5
    Range: 10.0.0
  • Microsoft/Windows 10 1809cpe-rescue
    Range: 10.0.0
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: 10.0.0
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: 10.0.0
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: 10.0.0
  • Microsoft/Windows Server 2016 (Server Core installation)v5
    Range: 10.0.14393.0
  • Microsoft/Windows Server 2019 (Server Core installation)v5
    Range: 10.0.17763.0
  • Microsoft/Windows Server, version 1803 (Server Core Installation)v5
    Range: 10.0.0
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: 10.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.