{"id":"CVE-2019-1383","aliases":["EUVD-2019-9940","GHSA-4vq4-x94h-7899"],"status":"published","title":"An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...","description":"An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1417.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00765,"percentile":0.55697,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-11-12T18:52:53Z","modified":"2026-06-17T02:28:30Z","products":[{"vendor":"microsoft","product":"windows"},{"vendor":"microsoft","product":"windows server"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1383","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1383"},{"url":"https://github.com/advisories/GHSA-4vq4-x94h-7899"}],"sources":{"cve":[{"id":"CVE-2019-1383","description":"An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1417.","status":"published","published":"2019-11-12T18:52:53Z","modified":"2024-08-04T18:13:30.516Z","updated_at":"2026-11-02T14:20:25.661187Z"}],"euvd":[{"id":"EUVD-2019-9940","description":"An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1417.","status":"published","published":"2019-11-12T18:52:53Z","modified":"2024-08-04T18:13:30Z","updated_at":"2026-11-03T03:06:58.233851Z"}],"ghsa":[{"id":"GHSA-4vq4-x94h-7899","title":"An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...","description":"An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1417.","status":"published","published":"2022-05-24T17:00:43Z","modified":"2023-01-28T05:07:24Z","updated_at":"2026-11-02T14:44:31.117774Z"}],"nvd":[{"id":"CVE-2019-1383","description":"An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1417.","status":"published","published":"2019-11-12T19:15:12.38Z","modified":"2026-06-17T02:28:30.167Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:35.052973Z"}]}}
