OnlyPatch
Microsoft Windows

CVE-2019-1045 — Windows Network File System Elevation of Privilege Vulnerability

Important CVSS 7.8 EPSS 0.01003 2019-06 archive

Executive Summary

An elevation of privilege vulnerability exists in the way that the Windows Network File System (NFS) handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows NFS properly handles objects in memory.

Overview

7.8
CVSS HIGH
Important
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
Category Elevation of Privilege
Released Jun 11 2019
Last Updated Jun 11 2019
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.01003 — 0.59313 percentile
NVD CVSS 7.8 HIGH — matches MSRC

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
ATTACK VECTOR
Local
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
Low
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
High
AVAILABILITY
High
EXPLOIT CODE MATURITY
Proof-of-Concept
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 7.0

EPSS Score

0.01003
probability of exploitation in the next 30 days
0.59313 percentile - updated 2026-07-25
View on FIRST.org

Affected Products

8 affected products
Product KB Article Severity Impact Restart Required
Windows 10 for 32-bit Systems 4503291 (Security Update) Important Elevation of Privilege Yes
Windows 10 for x64-based Systems 4503291 (Security Update) Important Elevation of Privilege Yes
Windows 10 Version 1703 for 32-bit Systems 4503279 (Security Update) Important Elevation of Privilege Yes
Windows 10 Version 1703 for x64-based Systems 4503279 (Security Update) Important Elevation of Privilege Yes
Windows 10 Version 1709 for 32-bit Systems 4503284 (Security Update) Important Elevation of Privilege Yes
Windows 10 Version 1709 for ARM64-based Systems 4503284 (Security Update) Important Elevation of Privilege Yes
Windows 10 Version 1709 for x64-based Systems 4503284 (Security Update) Important Elevation of Privilege Yes
Windows 7 for 32-bit Systems Service Pack 1 4503292 (Monthly Rollup) 4503269 (Security Only) Important Elevation of Privilege 4499164 Base: 7.8 Temporal: 7.0 Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows 7 for x64-based Systems Service Pack 1 4503292 (Monthly Rollup) 4503269 (Security Only) Important Elevation of Privilege 4499164 Base: 7.8 Temporal: 7.0 Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows 8.1 for 32-bit systems 4503276 (Monthly Rollup) 4503290 (Security Only) Important Elevation of Privilege 4499151 Base: 7.8 Temporal: 7.0 Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows 8.1 for x64-based systems 4503276 (Monthly Rollup) 4503290 (Security Only) Important Elevation of Privilege 4499151 Base: 7.8 Temporal: 7.0 Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows RT 8.1 4503276 (Monthly Rollup) Important Elevation of Privilege Yes

Patches

4 patches
Article Type Restart
4503291 Security Update Yes
4503279 Security Update Yes
4503284 Security Update Yes
4503276 Monthly Rollup Yes

Known Exploits

Acknowledgments

None

On This Page