CVE-2019-1372
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-1372
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system thereby escaping the Sandbox.The security update addresses the vulnerability by ensuring that Azure App Service sanitizes user inputs., aka 'Azure App Service Remote Code Execution Vulnerability'.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Azure App Service on Azure Stack 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Azure App Service on Azure Stack是美国微软（Microsoft）公司的一套平台即服务（PaaS）解决方案。该产品支持用户创建Web、API和Azure Functions应用等。 Microsoft Azure App Service on Azure Stack中存在缓冲区错误漏洞，该漏洞源于程序在将内存复制到缓冲区时，没有检查缓冲区的长度。攻击者可利用该漏洞造成沙盒逃逸。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Azure App Service on Azure Stack | unspecified | - |
II. Public POCs for CVE-2019-1372
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1372
请登录查看更多情报信息。
Same Patch Batch · Microsoft · 2019-10-10 · 60 CVEs total
| CVE-2019-1340 | Microsoft Windows AppX Deployment Server 安全漏洞 | |
| CVE-2019-1316 | Microsoft Windows 安全漏洞 | |
| CVE-2019-1313 | Microsoft SQL Server Management Studio 信息泄露漏洞 | |
| CVE-2019-1311 | Microsoft Windows Imaging API 缓冲区错误漏洞 | |
| CVE-2019-1308 | Microsoft ChakraCore和Microsoft Edge 缓冲区错误漏洞 | |
| CVE-2019-1314 | Microsoft Windows 10 Mobile 授权问题漏洞 | |
| CVE-2019-1344 | Microsoft Windows Code Integrity Module 信息泄露漏洞 | |
| CVE-2019-1343 | Microsoft Windows和Microsoft Windows Server 缓冲区错误漏洞 | |
| CVE-2019-1342 | Microsoft Windows Error Reporting Manager 输入验证错误漏洞 | |
| CVE-2019-1341 | Microsoft Windows和Microsoft Windows Server 安全漏洞 | |
| CVE-2019-0608 | Microsoft Edge和Internet Explorer 安全漏洞 | |
| CVE-2019-1339 | Microsoft Windows Error Reporting Manager 后置链接漏洞 | |
| CVE-2019-1338 | Microsoft Windows和Microsoft Windows Server 加密问题漏洞 | |
| CVE-2019-1337 | Microsoft Windows和Microsoft Windows Server 信息泄露漏洞 | |
| CVE-2019-1336 | Microsoft Windows Update Client 安全漏洞 | |
| CVE-2019-1335 | Microsoft ChakraCore和Microsoft Edge 缓冲区错误漏洞 | |
| CVE-2019-1334 | Microsoft Windows和Microsoft Windows Server 信息泄露漏洞 | |
| CVE-2019-1333 | Microsoft Windows和Microsoft Windows Server 输入验证错误漏洞 | |
| CVE-2019-1331 | Microsoft Excel 缓冲区错误漏洞 | |
| CVE-2019-1330 | Microsoft SharePoint 安全漏洞 |
Showing top 20 of 60 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: Microsoft
- CVE-2026-42826
Azure DevOps Information Disclosure Vulnerability - CVE-2026-35428
Azure Cloud Shell Spoofing Vulnerability - CVE-2026-35435
Azure AI Foundry Elevation of Privilege Vulnerability - CVE-2026-34327
Microsoft Partner Center Spoofing Vulnerability - CVE-2026-33844
Azure Managed Instance for Apache Cassandra Remote Code Exec
V. Comments for CVE-2019-1372
No comments yet