CVE-2019-0998— Windows Storage Service Elevation of Privilege Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-0998
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Windows Storage Service Elevation of Privilege Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application. The security update addresses the vulnerability by correcting how the Storage Services handles file operations.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows Storage Service 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Windows Storage Service是其中的一个存储服务组件。 Microsoft Windows Storage Service中存在权限许可和访问控制问题漏洞。该漏洞源于网络系统或产品缺乏有效的权限许可和访问控制措施。以下产品及版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Windows 10 Version 1803 | 10.0.0 ~ publication | - | |
| Microsoft | Windows Server, version 1803 (Server Core Installation) | 10.0.0 ~ publication | - | |
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0 ~ publication | - | |
| Microsoft | Windows 10 Version 1809 | 10.0.0 ~ publication | - | |
| Microsoft | Windows Server 2019 | 10.0.17763.0 ~ publication | - | |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 ~ publication | - | |
| Microsoft | Windows 10 Version 1709 for 32-bit Systems | 10.0.0 ~ publication | - | |
| Microsoft | Windows 10 Version 1709 | 10.0.0 ~ publication | - | |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | 10.0.0 ~ publication | - | |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | 10.0.0 ~ publication | - | |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 ~ publication | - | |
| Microsoft | Windows Server, version 1903 (Server Core installation) | 10.0.0 ~ publication | - |
II. Public POCs for CVE-2019-0998
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-0998
请登录查看更多情报信息。
Same Patch Batch · Microsoft · 2019-06-12 · 88 CVEs total
| CVE-2019-0888 | 8.8 HIGH | ActiveX Data Objects (ADO) Remote Code Execution Vulnerability |
| CVE-2019-0722 | 8.8 HIGH | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2019-1019 | 8.5 HIGH | Microsoft Windows Security Feature Bypass Vulnerability |
| CVE-2019-0974 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0985 | 7.8 HIGH | Microsoft Speech API Remote Code Execution Vulnerability |
| CVE-2019-1069 | 7.8 HIGH | Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2019-1064 | 7.8 HIGH | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1065 | 7.8 HIGH | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2019-0983 | 7.8 HIGH | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-1007 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1027 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1028 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1026 | 7.8 HIGH | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-0973 | 7.8 HIGH | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2019-0904 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0905 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0906 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0907 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0908 | 7.8 HIGH | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-1045 | 7.8 HIGH | Windows Network File System Elevation of Privilege Vulnerability |
Showing top 20 of 88 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Windows 10 Version 1803
- CVE-2021-31194
OLE Automation Remote Code Execution Vulnerability - CVE-2021-31193
Windows SSDP Service Elevation of Privilege Vulnerability - CVE-2021-31191
Windows Projected File System FS Filter Driver Information D - CVE-2021-31188
Windows Graphics Component Elevation of Privilege Vulnerabil - CVE-2021-31187
Windows WalletService Elevation of Privilege Vulnerability
Same vendor: Microsoft
- CVE-2026-42826
Azure DevOps Information Disclosure Vulnerability - CVE-2026-35428
Azure Cloud Shell Spoofing Vulnerability - CVE-2026-35435
Azure AI Foundry Elevation of Privilege Vulnerability - CVE-2026-34327
Microsoft Partner Center Spoofing Vulnerability - CVE-2026-33844
Azure Managed Instance for Apache Cassandra Remote Code Exec
V. Comments for CVE-2019-0998
No comments yet