CVE-2019-1323

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Oct 10, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-132323.3Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "b CVE-2019-132337.0In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race conditi CVE-2019-132346.1In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.CVE-2019-132356.1In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.CVE-2019-132366.1In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.CVE-2019-132374.3In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access serve CVE-2019-132387.5An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsin CVE-2019-132396.1inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.CVE-2019-13245.3An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled in packets, aka 'Windo CVE-2019-132405.9An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password aga CVE-2019-132417.8FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) i CVE-2019-132427.8IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98.