description: An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.
problem types: Elevation of Privilege
affected:
{
product: Windows
vendor: Microsoft
versions:
status: affected, version: 7 for 32-bit Systems Service Pack 1
status: affected, version: 7 for x64-based Systems Service Pack 1
status: affected, version: 8.1 for 32-bit systems
status: affected, version: 8.1 for x64-based systems
status: affected, version: RT 8.1
status: affected, version: 10 for 32-bit Systems
status: affected, version: 10 for x64-based Systems
status: affected, version: 10 Version 1607 for 32-bit Systems
status: affected, version: 10 Version 1607 for x64-based Systems
status: affected, version: 10 Version 1703 for 32-bit Systems
status: affected, version: 10 Version 1703 for x64-based Systems
status: affected, version: 10 Version 1709 for 32-bit Systems
status: affected, version: 10 Version 1709 for x64-based Systems
status: affected, version: 10 Version 1803 for 32-bit Systems
status: affected, version: 10 Version 1803 for x64-based Systems
status: affected, version: 10 Version 1803 for ARM64-based Systems
status: affected, version: 10 Version 1809 for 32-bit Systems
status: affected, version: 10 Version 1809 for x64-based Systems
status: affected, version: 10 Version 1809 for ARM64-based Systems
status: affected, version: 10 Version 1709 for ARM64-based Systems
}
{
product: Windows Server
vendor: Microsoft
versions:
status: affected, version: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)
status: affected, version: 2008 R2 for Itanium-Based Systems Service Pack 1
status: affected, version: 2008 R2 for x64-based Systems Service Pack 1
status: affected, version: 2008 for 32-bit Systems Service Pack 2 (Core installation)
status: affected, version: 2012
status: affected, version: 2012 (Core installation)
status: affected, version: 2012 R2
status: affected, version: 2012 R2 (Core installation)
status: affected, version: 2016
status: affected, version: 2016  (Core installation)
status: affected, version: version 1803  (Core Installation)
status: affected, version: 2019
status: affected, version: 2019  (Core installation)
status: affected, version: 2008 for Itanium-Based Systems Service Pack 2
status: affected, version: 2008 for 32-bit Systems Service Pack 2
status: affected, version: 2008 for x64-based Systems Service Pack 2
status: affected, version: 2008 for x64-based Systems Service Pack 2 (Core installation)
}
{
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: unspecified
}
