First published: Wed Sep 11 2019(Updated: )
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1269.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1903 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2016 | =1803 | |
Microsoft Windows Server 2016 | =1903 | |
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1272 has a severity rating of important, indicating a significant risk for elevated privileges.
To fix CVE-2019-1272, install the security update provided by Microsoft for the affected versions of Windows.
CVE-2019-1272 could allow an attacker to execute arbitrary code with local system privileges.
CVE-2019-1272 is present in multiple versions of Windows 10, including versions 1607 through 1903.
Yes, CVE-2019-1272 can also affect Windows Server 2016 and Windows Server 2019.