CVE-2019-0863 — VulnIntel

CVE-2019-0863

HIGH

KEV

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.

StatusAnalyzed

설명

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.

Score Summary

CVSS Score: 7.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 78.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 5.2%
(상위 91.6%)
Attack Vector: Local Access
Low Complexity
Low Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 05/16/2019(7 years ago)
Modified: 10/29/2025(9 months ago)
Source: KEV, NVD
Products: 16

CISA KEV Listing

Vendor / Project: Microsoft
Product: Windows

Date Added: 11/03/2021
Due Date: 05/03/2022Overdue 1541d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished05/16/2019
CISA KEVKEV Listed11/03/2021
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	04/20/2026
NVDNIST	2.0	7.2

References (4)

NVD
Third Party Advisory
http://packetstormsecurity.com/files/153008/Angry-Polar-Bear-2-Microsoft-Windows-Error-Reporting-Local-Privilege-Escalation.html
NVD
Patch
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0863
NVD

Affected Products (16)

Impact	78.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00