CVE-2019-1378

7.8 highEPSS 1.3%

High (7.8) in microsoft windows 10 update assistant. EPSS 1.3% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows 10 Update Assistant Elevation of Privilege Vulnerability'.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2019-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10_update_assistant

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1378
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1378

Check your stack JSON