CVE-2019-9634

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2019/04/09/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/107450Third Party Advisory, VDB Entry
https://github.com/golang/go/issues/30642Exploit, Issue Tracking, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/04/09/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/107450Third Party Advisory, VDB Entry
https://github.com/golang/go/issues/30642Exploit, Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Mar 8, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-96356.5NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.CVE-2019-96369.8Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NF CVE-2019-96377.5An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is imp CVE-2019-96387.5An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized r CVE-2019-96397.5An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized r CVE-2019-96407.5An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in CVE-2019-96419.8An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized r CVE-2019-96429.8An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malic CVE-2019-96445.4An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited CVE-2019-96466.1The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the CVE-2019-96476.1Gila CMS 1.9.1 has XSS.CVE-2019-96485.3An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE co