CVE-2019-0786: Input Validation

Published Apr 9, 2019

Updated

An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.

Affected Software

6 affected components

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0786

Event History

Apr 9, 2019

CVE Published

via MITRE·08:15 PM

Data Sourced

via MITRE·08:15 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0786?

CVE-2019-0786 has a severity rating of important, according to Microsoft.

How do I fix CVE-2019-0786?

To fix CVE-2019-0786, install the security updates provided by Microsoft for affected versions of Windows and Windows Server.

What systems are impacted by CVE-2019-0786?

CVE-2019-0786 affects Microsoft Windows 10 versions 1709, 1803, 1809 and Windows Server 2016 and 2019.

Can CVE-2019-0786 be exploited remotely?

CVE-2019-0786 requires an attacker to have valid credentials and be on the same machine to exploit the vulnerability.

What type of vulnerability is CVE-2019-0786?

CVE-2019-0786 is classified as an elevation of privilege vulnerability in the SMB Server.