CVE-2019-1044

Windows Secure Kernel Mode Security Feature Bypass Vulnerability

State
Published
Severity
5.3 Medium
Published
Jun 12, 2019
Updated
May 20, 2025
Reserved
Nov 26, 2018

Read the record on cve.org

Description

A security feature bypass vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memory. To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system. An attacker who successfully exploited the vulnerability could violate virtual trust levels (VTL). The update addresses the vulnerability by correcting how Windows Secure Kernel Mode handles objects in memory to properly enforce VTLs.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Windows 10 Version 1809Microsoft
  • 10.0.17763.0 to before publicationAffected
Windows 10 Version 1809Microsoft
  • 10.0.0 to before publicationAffected
Windows Server 2019Microsoft
  • 10.0.17763.0 to before publicationAffected
Windows Server 2019 (Server Core installation)Microsoft
  • 10.0.17763.0 to before publicationAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.