First published: Tue Apr 09 2019(Updated: )
An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows Server 2016 | =1709 | |
Microsoft Windows Server 2016 | =1803 | |
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-0786 has a severity rating of important, according to Microsoft.
To fix CVE-2019-0786, install the security updates provided by Microsoft for affected versions of Windows and Windows Server.
CVE-2019-0786 affects Microsoft Windows 10 versions 1709, 1803, 1809 and Windows Server 2016 and 2019.
CVE-2019-0786 requires an attacker to have valid credentials and be on the same machine to exploit the vulnerability.
CVE-2019-0786 is classified as an elevation of privilege vulnerability in the SMB Server.