CVE-2019-1113

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jul 15, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-111319.8Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentCVE-2019-111328.4Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potCVE-2019-111337.8Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enaCVE-2019-111356.5TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable informatCVE-2019-111366.7Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable ProcessorsCVE-2019-111378.2Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) XeCVE-2019-111396.0Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to pCVE-2019-111406.7Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilegCVE-2019-111436.7Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable esCVE-2019-111457.8Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalCVE-2019-111467.8Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalCVE-2019-111477.8Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70
CVE-2019-1113: High severity, CVSS 8.8 | Vulnix