deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-1161
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.
To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted command that could exploit the vulnerability and delete protected files on an affected system once MpSigStub.exe ran again.
The update addresses the vulnerability and blocks the arbitrary deletion.
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1161; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1161
CVE: CVE-2019-1162
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).
An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control over an affected system.
The update addresses the vulnerability by correcting how Windows handles calls to ALPC.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1162; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1162
CVE: CVE-2019-1163
Published: 2019-08-14
Description: A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature.
To exploit the vulnerability, an attacker could modify a signed CAB file and inject malicious code. The attacker could then convince a target user to execute the file.
The update addresses the vulnerability by correcting how Windows validates file signatures.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-354, CWE-354
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1163; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1163
CVE: CVE-2019-1164
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.
The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1260
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1164; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1164
CVE: CVE-2019-1168
Published: 2019-08-14
Description: An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
The update addresses this vulnerability by correcting how the p2pimsvc service handles processes these requests.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1168; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1168
CVE: CVE-2019-1169
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1169; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1169
CVE: CVE-2019-1170
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system.
To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.
The security update addresses the vulnerability by preventing sandboxed processes from creating reparse points targeting inaccessible files.
CVSS Score: 7.9 (HIGH)
CWE: CWE-862
References: http://packetstormsecurity.com/files/154192/Microsoft-Windows-SET_REPARSE_POINT_EX-Mount-Point-Security-Feature-Bypass.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1170; http://packetstormsecurity.com/files/154192/Microsoft-Windows-SET_REPARSE_POINT_EX-Mount-Point-Security-Feature-Bypass.html
CVE: CVE-2019-1171
Published: 2019-08-14
Description: An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.
The update addresses the vulnerability through a software change to the OAEP decoding operations.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1171; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1171
CVE: CVE-2019-1172
Published: 2019-08-14
Description: An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session. An attacker who successfully exploited the vulnerability could take over a user's account.
To exploit the vulnerability, an attacker would have to trick a user into browsing to a specially crafted website, allowing the attacker to steal the user's token.
The security update addresses the vulnerability by correcting how MSA handles cookies.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1172; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1172
CVE: CVE-2019-1173
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the PsmServiceExtHost.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1173; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1173
CVE: CVE-2019-1174
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the PsmServiceExtHost.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
CWE: CWE-1257
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1174; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1174
CVE: CVE-2019-1175
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the psmsrv.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1175; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1175
CVE: CVE-2019-1176
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
The update addresses the vulnerability by correcting how DirectX handles objects in memory.
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1176; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1176
CVE: CVE-2019-1177
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the rpcss.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1177; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1177
CVE: CVE-2019-1178
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the ssdpsrv.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1178
CVE: CVE-2019-1179
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the unistore.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1179; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1179
CVE: CVE-2019-1180
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the wcmsvc.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1180; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1180
CVE: CVE-2019-1181
Published: 2019-08-14
Description: A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.
The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.
CVSS Score: 9.8 (CRITICAL)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190819-01-windows-en; https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1181
CVE: CVE-2019-1182
Published: 2019-08-14
Description: A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.
The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.
CVSS Score: 9.8 (CRITICAL)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190819-01-windows-en; https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182
CVE: CVE-2019-1183
Published: 2019-08-14
Description: This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by the security updates for the vulnerability discussed in CVE-2019-1194. No update is required.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1183; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1183
CVE: CVE-2019-1184
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
The update addresses this vulnerability by correcting unprotected COM calls.
CVSS Score: 6.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1184; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1184
CVE: CVE-2019-1185
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.
CVSS Score: 7.3 (HIGH)
CWE: CWE-121
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1185; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1185
CVE: CVE-2019-1186
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the wcmsvc.dll properly handles objects in memory.
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1186; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1186
CVE: CVE-2019-1187
Published: 2019-08-14
Description: A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an XML application.
The update addresses the vulnerability by correcting how the XmlLite runtime parses XML input.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1187; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1187
CVE: CVE-2019-1188
Published: 2019-08-14
Description: A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.
An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
The attacker could present to the user a removable drive, or remote share, that contains a malicious .LNK file and an associated malicious binary. When the user opens this drive(or remote share) in Windows Explorer, or any other application that parses the .LNK file, the malicious binary will execute code of the attacker’s choice, on the target system.
The security update addresses the vulnerability by correcting the processing of shortcut LNK references.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59, CWE-59
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1188; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1188
CVE: CVE-2019-1190
Published: 2019-08-14
Description: An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory.
An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the Windows kernel image properly handles objects in memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1190; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1190
CVE: CVE-2019-1192
Published: 2019-08-14
Description: A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins. The vulnerability allows Microsoft browsers to bypass Same-Origin Policy (SOP) restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted.
In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
The security update addresses the vulnerability by modifying how affected Microsoft browsers handle different-origin requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1192; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1192
CVE: CVE-2019-1193
Published: 2019-08-14
Description: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.
The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1193; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1193