CVE-2019-1315—Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Vulnerability Name

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Description

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

• https://nvd.nist.gov/vuln/detail/CVE-2019-1315

Related Weaknesses

• CWE-59