CVE-2019-0555

Published Jan 8, 2019

Last updated 4 years ago

Overview

Description
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Source
secure@microsoft.com
NVD status
Analyzed

Risk scores

CVSS 3.0

Type
Primary
Base score
7.8
Impact score
6
Exploitability score
1.1
Vector string
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
4.4
Impact score
6.4
Exploitability score
3.4
Vector string
AV:L/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-862

Social media

Hype score
Not currently trending

Configurations