CVE-2019-0735: High severity Microsoft Windows 10 vulnerability
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.14.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.3.0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-0735?
CVE-2019-0735 has a CVSS score that indicates it is a high severity vulnerability.
How do I fix CVE-2019-0735?
To fix CVE-2019-0735, you should apply the latest security updates released by Microsoft for your affected Windows version.
Which versions of Windows are affected by CVE-2019-0735?
CVE-2019-0735 affects several versions of Windows including Windows 7, 8.1, 10, and various Windows Server editions.
What type of vulnerability is CVE-2019-0735?
CVE-2019-0735 is an elevation of privilege vulnerability within the Windows Client Server Run-Time Subsystem (CSRSS).
Can CVE-2019-0735 be exploited remotely?
CVE-2019-0735 requires local access for exploitation, making it less likely to be exploited remotely.