CVE-2019-1168— Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability

Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability

An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the p2pimsvc service handles processes these requests.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A

Microsoft Windows和Windows Server 权限许可和访问控制问题漏洞

Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。 Microsoft Windows p2pimsvc服务中存在提权漏洞。攻击者可通过登录到系统并运行特制的应用程序利用该漏洞以提升的权限执行任意代码。以下产品及版本受到影响：Microsoft Windows 10，Windows 10版本16

N/A

N/A