{"id":"CVE-2019-1378","aliases":["EUVD-2019-9935","GHSA-pj9q-rwff-m7f4"],"status":"published","title":"An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it...","description":"An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01311,"percentile":0.70846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2019-10-10T13:28:42Z","modified":"2026-06-17T02:28:29Z","products":[{"vendor":"microsoft","product":"windows update assistant"},{"vendor":"microsoft","product":"windows_10_update_assistant"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1378","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1378"},{"url":"https://github.com/advisories/GHSA-pj9q-rwff-m7f4"}],"sources":{"cve":[{"id":"CVE-2019-1378","description":"An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.","status":"published","published":"2019-10-10T13:28:42Z","modified":"2024-08-04T18:13:30.503Z","updated_at":"2026-11-02T14:20:26.034547Z"}],"euvd":[{"id":"EUVD-2019-9935","description":"An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.","status":"published","published":"2019-10-10T13:28:42Z","modified":"2024-08-04T18:13:30Z","updated_at":"2026-11-03T03:06:58.233851Z"}],"ghsa":[{"id":"GHSA-pj9q-rwff-m7f4","title":"An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it...","description":"An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.","status":"published","published":"2022-05-24T16:58:30Z","modified":"2023-01-28T05:07:20Z","updated_at":"2026-11-02T14:44:31.117774Z"}],"nvd":[{"id":"CVE-2019-1378","description":"An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.","status":"published","published":"2019-10-10T14:15:18.893Z","modified":"2026-06-17T02:28:29.547Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:05:31.019577Z"}]}}