What is the severity of CVE-2019-1393?

CVE-2019-1393 has been rated as important in severity by Microsoft.

How do I fix CVE-2019-1393?

To fix CVE-2019-1393, you should apply the latest security updates provided by Microsoft for your affected Windows version.

Which systems are affected by CVE-2019-1393?

CVE-2019-1393 affects multiple versions of Microsoft Windows, including Windows 7, 8.1, 10, and various Windows Server versions.

What type of vulnerability is CVE-2019-1393?

CVE-2019-1393 is an elevation of privilege vulnerability that arises when the Win32k component improperly handles objects in memory.

Could CVE-2019-1393 allow attackers to gain access?

Yes, CVE-2019-1393 could allow an attacker to execute arbitrary code with elevated privileges on the affected system.

Vulnerability/
CVE-2019-1393

high

8.8

CWE

787

12/11/2019

4/8/2024

CVE-2019-1393: Microsoft Windows ptransMatchAPal Out-Of-Bounds Write Privilege Escalation Vulnerability

First published: Tue Nov 12 2019(Updated: )

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1394, CVE-2019-1395, CVE-2019-1396, CVE-2019-1408, CVE-2019-1434.

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows
Microsoft Windows 10
Microsoft Windows 10	=1607
Microsoft Windows 10	=1709
Microsoft Windows 10	=1803
Microsoft Windows 10	=1809
Microsoft Windows 10	=1903
Microsoft Windows 7	=sp1
Microsoft Windows 8.1
Microsoft Windows RT
Microsoft Windows Server	=sp2
Microsoft Windows Server	=r2-sp1
Microsoft Windows Server	=r2-sp1
Microsoft Windows Server
Microsoft Windows Server	=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016	=1803
Microsoft Windows Server 2016	=1903
Microsoft Windows Server 2019

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1393

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-1393?
CVE-2019-1393 has been rated as important in severity by Microsoft.
How do I fix CVE-2019-1393?
To fix CVE-2019-1393, you should apply the latest security updates provided by Microsoft for your affected Windows version.
Which systems are affected by CVE-2019-1393?
CVE-2019-1393 affects multiple versions of Microsoft Windows, including Windows 7, 8.1, 10, and various Windows Server versions.
What type of vulnerability is CVE-2019-1393?
CVE-2019-1393 is an elevation of privilege vulnerability that arises when the Win32k component improperly handles objects in memory.
Could CVE-2019-1393 allow attackers to gain access?
Yes, CVE-2019-1393 could allow an attacker to execute arbitrary code with elevated privileges on the affected system.

agent/references
agent/type
agent/title
agent/remedy
agent/severity
agent/weakness
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
collector/zdi-advisory
source/ZDI
alias/ZDI-19-983
alias/ZDI-CAN-9291
alias/CVE-2019-1393
agent/software-canonical-lookup
agent/event
agent/trending
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
agent/softwarecombine
vendor/microsoft
canonical/microsoft windows
canonical/microsoft windows 10
version/microsoft windows 10/1607
version/microsoft windows 10/1709
version/microsoft windows 10/1803
version/microsoft windows 10/1809
version/microsoft windows 10/1903
canonical/microsoft windows 7
version/microsoft windows 7/sp1
canonical/microsoft windows 8.1
canonical/microsoft windows rt
canonical/microsoft windows server
version/microsoft windows server/sp2
version/microsoft windows server/r2-sp1
version/microsoft windows server/r2
canonical/microsoft windows server 2016
version/microsoft windows server 2016/1803
version/microsoft windows server 2016/1903
canonical/microsoft windows server 2019

Frequently Asked Questions

What is the severity of CVE-2019-1393?
CVE-2019-1393 has been rated as important in severity by Microsoft.
How do I fix CVE-2019-1393?
To fix CVE-2019-1393, you should apply the latest security updates provided by Microsoft for your affected Windows version.
Which systems are affected by CVE-2019-1393?
CVE-2019-1393 affects multiple versions of Microsoft Windows, including Windows 7, 8.1, 10, and various Windows Server versions.
What type of vulnerability is CVE-2019-1393?
CVE-2019-1393 is an elevation of privilege vulnerability that arises when the Win32k component improperly handles objects in memory.
Could CVE-2019-1393 allow attackers to gain access?
Yes, CVE-2019-1393 could allow an attacker to execute arbitrary code with elevated privileges on the affected system.

CVE-2019-1393: Microsoft Windows ptransMatchAPal Out-Of-Bounds Write Privilege Escalation Vulnerability

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-1393?

How do I fix CVE-2019-1393?

Which systems are affected by CVE-2019-1393?

What type of vulnerability is CVE-2019-1393?

Could CVE-2019-1393 allow attackers to gain access?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2019-1393?

How do I fix CVE-2019-1393?

Which systems are affected by CVE-2019-1393?

What type of vulnerability is CVE-2019-1393?

Could CVE-2019-1393 allow attackers to gain access?