CVE-2019-0796

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

Score

CVSS 3.0 5.5 Medium

Status

Modified - secure@microsoft.com

Published

2019-04-09

Last modified

2024-08-04

Weaknesses

CWE-264

Affected products

• Windows (Microsoft)
• Windows 10 (Microsoft)
• Windows 7 (Microsoft)
• Windows 8.1 (Microsoft)
• Windows Rt 8.1 (Microsoft)
• Windows Server (Microsoft)
• Windows Server 2008 (Microsoft)
• Windows Server 2012 (Microsoft)
• Windows Server 2016 (Microsoft)
• Windows Server 2019 (Microsoft)

References

• http://packetstormsecurity.com/files/152535/Microsoft-Windows-LUAFV-LuafvCopyShortName-Arbitrary-Short-Name-Privilege-E…
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0796
• https://www.exploit-db.com/exploits/46715/