7.8
Élevée
CVE-2019-1169 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle…
Description
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Windows 7 6.1 | 6.1.0 → dernières | Pas de correctif indiqué |
| Windows 7 Service Pack 1 6.1 | 6.1.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 Service Pack 2 6.0 | 6.0.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 Service Pack 2 (Server Core installation) 6.0 | 6.0.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 Service Pack 2 6.0 | 6.0.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 R2 Systems Service Pack 1 6.1 | 6.1.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 R2 Service Pack 1 6.1 | 6.1.0 → dernières | Pas de correctif indiqué |
| Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.0 | 6.0.0 → dernières | Pas de correctif indiqué |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Windows 7
Les 947 CVE de Windows 7 →
CVE-2022-35759
Windows Local Security Authority (LSA) Denial of Service Vulnerability
6.5
Moyenne
CVE-2022-35758
Windows Kernel Memory Information Disclosure Vulnerability
5.5
Moyenne
CVE-2022-35756
Windows Kerberos Elevation of Privilege Vulnerability
7.8
Élevée
CVE-2022-35752
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
8.1
Élevée