CVE-2019-1089

2019-07-1518:56:21

microsoft

www.cve.org

EPSS

0.001

Percentile

21.2%

JSON

An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka ‘Windows RPCSS Elevation of Privilege Vulnerability’.

CNA Affected

[
  {
    "product": "Multiple",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ]
  }
]