NVD disclosure day

Published threat advisories for October 10, 2019

CVE advisoryKnown Exploit

CVE-2019-1322

Windows Authentication Elevation of Privilege Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Windows systems have a vulnerability in how they handle authentication requests, allowing an attacker with local access to gain elevated privileges. This could enable attackers to run processes with higher permissions, potentially impacting system integrity and data confidentiality. The affected systems include various

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2019-1315

Windows Error Reporting Privilege Escalation.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Windows Error Reporting manager allows for privilege escalation by improperly handling hard links. This could enable attackers to overwrite critical files, impacting system integrity and granting elevated permissions. Organizations should apply vendor updates promptly.

NVD published: • CISA KEV