An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symbolic link and hard link attacks, aka 'Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability'.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | 2019-09 Security Only Quality Update for Windows 7 for x86-based Systems (KB4516033)2019-09 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4516064)2019-09 Cumulative Update for Microsoft Windows 10, version 1607 (KB4516044)2019-09 Cumulative Update for Microsoft Windows 10, version 1903 (KB4515384)2019-09 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4512578)2019-09 Cumulative Update for Microsoft Windows 10, version 1507 (KB4516070)2019-09 Cumulative Update for Microsoft Windows 10, version 1803 (KB4516058)2019-09 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4516044)2019-09 Cumulative Update for Microsoft Windows Server 2012 R2 (KB4516064)2019-09 Cumulative Update for Microsoft Windows 10, version 1709 (KB4516066)2019-09 Cumulative Update for Microsoft Windows 10, version 1809 (KB4512578)2019-09 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4515384)2019-09 Cumulative Update for Microsoft Windows 10, version 1703 (KB4516068)2019-09 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4516033)2019-09 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4516033)2019-09 Security Only Quality Update for Windows 7 for x64-based Systems (KB4516033)2019-09 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4516064)2019-09 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4516033)2019-09 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4516033) | Sep 10, 2019 | Sep 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub