High severity7.3NVD Advisory· Published Dec 24, 2019· Updated Jun 17, 2026
CVE-2019-19954
CVE-2019-19954
Description
Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:signal:signal-desktop:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:signal:signal-desktop:*:*:*:*:*:*:*:*range: <1.29.1
- (no CPE)range: <1.29.1
- Signal/Signal Desktopdescription
Patches
Vulnerability mechanics
References
2- github.com/signalapp/Signal-Desktop/commit/2da39cca673cc11be3c6d70d4fb95889f9ab6688nvdPatch
- blog.mirch.io/2019/12/18/signal-desktop-windows-lpe/nvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.