CVE-2019-1045
Windows Network File System Elevation of Privilege Vulnerability
- Published
- Updated
- Reserved
- Assigned by
- microsoft
Description
An elevation of privilege vulnerability exists in the way that the Windows Network File System (NFS) handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows NFS properly handles objects in memory.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| microsoftCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 1.0% · top 37% of all CVEs (5 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
- Elevation of Privilege
Affected products
Microsoft · Windows 10 Version 1703
- affected 10.0.0 – < publication
Microsoft · Windows 10 Version 1709 for 32-bit Systems
- affected 10.0.0 – < publication
Microsoft · Windows 10 Version 1709
- affected 10.0.0 – < publication
Microsoft · Windows 10 Version 1507
- affected 10.0.10240.0 – < publication
- affected 6.1.0 – < publication
Microsoft · Windows 7 Service Pack 1
- affected 6.1.0 – < publication
- affected 6.3.0 – < publication
Microsoft · Windows Server 2008 R2 Systems Service Pack 1
- affected 6.1.0 – < publication
Microsoft · Windows Server 2008 R2 Service Pack 1
- affected 6.1.7601.0 – < publication
Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- affected 6.1.7601.0 – < publication
Microsoft · Windows Server 2012
- affected 6.2.9200.0 – < publication
Microsoft · Windows Server 2012 (Server Core installation)
- affected 6.2.9200.0 – < publication
Microsoft · Windows Server 2012 R2
- affected 6.3.9600.0 – < publication
Microsoft · Windows Server 2012 R2 (Server Core installation)
- affected 6.3.9600.0 – < publication
References (2)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-1045)Record last updated .