CVE-2019-1067

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jul 15, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-106706.1An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string for filtering data. HowCVE-2019-106718.8An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queries, resulting in SQLCVE-2019-106729.8treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.CVE-2019-106738.8A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to bCVE-2019-106766.5An issue was discovered in Uniqkey Password Manager 1.14. Upon entering new credentials to a site that is not registered within this productCVE-2019-106776.1Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote atCVE-2019-106787.5Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.CVE-2019-106797.8Thomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file because of weak %PROGRAMFILES(X86)%\Thomson ReuCVE-2019-10688.8A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'MicrCVE-2019-106827.5django-nopassword before 5.0.0 stores cleartext secrets in the database.CVE-2019-106849.8Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.CVE-2019-106856.1A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0.