CVE-2019-0692

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVE-2019-0692 is fixed in 13 products on 1 platform, first by KB4489886, released March 12, 2019. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.0
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0093
60th percentile

<p>An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1709 for 32-bit Systems 16299.1029 KB4489886 Mar 12, 2019
Windows 10 Version 1709 for ARM64-based Systems 16299.1029 KB4489886 Mar 12, 2019
Windows 10 Version 1709 for x64-based Systems 16299.1029 KB4489886 Mar 12, 2019
Windows 10 Version 1803 for 32-bit Systems 17134.648 KB4489868 Mar 12, 2019
Windows 10 Version 1803 for ARM64-based Systems 17134.648 KB4489868 Mar 12, 2019
Windows 10 Version 1803 for x64-based Systems 17134.648 KB4489868 Mar 12, 2019
Windows 10 Version 1809 for 32-bit Systems 17763.379 KB4489899 Mar 12, 2019
Windows 10 Version 1809 for ARM64-based Systems 17763.379 KB4489899 Mar 12, 2019
Windows 10 Version 1809 for x64-based Systems 17763.379 KB4489899 Mar 12, 2019
Windows Server 2019 17763.379 KB4489899 Mar 12, 2019
Windows Server 2019 (Server Core installation) 17763.379 KB4489899 Mar 12, 2019
Windows Server, version 1709 (Server Core Installation) 16299.1029 KB4489886 Mar 12, 2019
Windows Server, version 1803 (Server Core Installation) 17134.648 KB4489868 Mar 12, 2019