Microsoft Windows 'SetJobFileSecurityByName()' Function Local Privilege Escalation Vulnerability



Microsoft Windows is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to gain elevated privileges in the context of the affected system.

Information

Bugtraq ID: 108423
Class: Design Error
CVE:
Remote: No
Local: Yes
Published: May 21 2019 12:00AM
Updated: May 21 2019 12:00AM
Credit: SandboxEscaper
Vulnerable: Microsoft Windows Server 2019 0
Microsoft Windows Server 2016 0
Microsoft Windows 8 0
Microsoft Windows 10


Not Vulnerable:

Exploit


The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.


Related Posts