CVE-2019-1176: DirectX Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.
Other sources
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses the vulnerability by correcting how DirectX handles objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Systems running Microsoft Windows 10, Microsoft Windows Server 2016, or Microsoft Windows Server 2019 are affected according to the advisory data. Exploitation requires an attacker to already be able to log on to the target system.
What access and actions does an attacker need to exploit it?
The attacker needs local authenticated access to the system and must run a specially crafted application. No user interaction is required after the attacker has access.
What is the impact of successful exploitation?
Successful exploitation allows arbitrary code execution in kernel mode. An attacker could take control of the affected system, install programs, view, modify, or delete data, and create accounts with full user rights.
What should be done to remediate the issue?
Apply the available patch. The update corrects how DirectX handles objects in memory.