CVE-2019-1379

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1383, CVE-2019-1417.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems
MicrosoftWindows Server2019; 2019 (Core installation)

References

Timeline

Published
Nov 12, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-13807.8A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of PrivilegCVE-2019-13815.5An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'MicrosoftCVE-2019-13825.5An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'CVE-2019-13837.8An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data SCVE-2019-13849.9A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this CVE-2019-13857.8An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resultiCVE-2019-13878.8An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. RecuCVE-2019-13887.8An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'WinCVE-2019-13898.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2019-13907.5A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutCVE-2019-13915.5A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. TCVE-2019-139157.5b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compi
CVE-2019-1379: High severity, CVSS 7.8 | Vulnix