CVE-2019-0880: Microsoft Windows Server

Описание

Оригинално описание

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

Засегнати продукти

• Microsoft Windows Server: 2012; 2012 (Core installation); 2012 R2; 2012 R2 (Core installation); 2016; 2016 (Core installation); version 1803 (Core Installation); 2019; 2019 (Core installation)
• Microsoft Windows: 8.1 for 32-bit systems; 8.1 for x64-based systems; RT 8.1; 10 for 32-bit Systems; 10 for x64-based Systems; 10 Version 1607 for 32-bit Systems; 10 Version 1607 for x64-based Systems; 10 Version 1703 for 32-bit Systems; 10 Version 1703 for x64-based Systems; 10 Version 1709 for 32-bit Systems; 10 Version 1709 for x64-based Systems; 10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; 10 Version 1709 for ARM64-based Systems
• Microsoft Windows 10 Version 1903 for 32-bit Systems: unspecified
• Microsoft Windows 10 Version 1903 for x64-based Systems: unspecified
• Microsoft Windows 10 Version 1903 for ARM64-based Systems: unspecified
• Microsoft Windows Server, version 1903 (Server Core installation): unspecified

История

Други уязвимости в Microsoft Windows Server

• 7.4CVE-2022-50238
• 7.4CVE-2025-59033
• 7.0CVE-2025-9491
• 5.0CVE-2022-40733
• 5.0CVE-2022-40732

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-0880
• https://nvd.nist.gov/vuln/detail/CVE-2019-0880
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0880
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0880