IT

Tracker / CVE-2019-1089

CVE-2019-1089

High 7.8

An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka 'Windows RPCSS Elevation of Privilege Vulnerability'.

Affected products and versions

microsoft windows_10
microsoft windows_7
microsoft windows_8.1
microsoft windows_rt_8.1
microsoft windows_server_2008
microsoft windows_server_2012
microsoft windows_server_2016
microsoft windows_server_2019

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References