CVE-2019-1325: Medium severity windows 10 vulnerability

Published Oct 10, 2019

Updated

An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system improperly handles specific local calls within Windows 7 for 32-bit systems, aka 'Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability'.

Affected Software

18 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1325

Event History

Oct 10, 2019

CVE Published

via MITRE·01:28 PM

Data Sourced

via MITRE·01:28 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-1325?

CVE-2019-1325 has a severity rating of Important as it allows elevation of privilege in the affected systems.

How do I fix CVE-2019-1325?

To fix CVE-2019-1325, install the security updates provided by Microsoft for affected versions of Windows.

Which systems are affected by CVE-2019-1325?

CVE-2019-1325 affects several versions of Windows, including Windows 7 SP1, Windows 10, Windows 8.1, and various Windows Server versions.

What type of vulnerability is CVE-2019-1325?

CVE-2019-1325 is classified as an elevation of privilege vulnerability.

Can CVE-2019-1325 be exploited remotely?

CVE-2019-1325 requires local access to the affected system to exploit the vulnerability.