An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory.An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.The security update addresses the vulnerability by ensuring the Windows kernel image properly handles objects in memory., aka ‘Windows Image Elevation of Privilege Vulnerability’.
NVD-CWE-noinfo
CVE-2019-1183
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka ‘Windows VBScript Engine Remote Code Execution Vulnerability’.
CVE-2019-1184
An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls, aka ‘Windows Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1178, CVE-2019-1179, CVE-2019-1180, CVE-2019-1186.
CVE-2019-1185
An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux, aka ‘Windows Subsystem for Linux Elevation of Privilege Vulnerability’.
CVE-2019-11855
An RPC server is enabled by default on the gateway’s LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9.
CVE-2019-1186
An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory, aka ‘Windows Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-1173, CVE-2019-1174, CVE-2019-1175, CVE-2019-1177, CVE-2019-1178, CVE-2019-1179, CVE-2019-1180, CVE-2019-1184.
