Rapid7

vulnerability

Microsoft Windows: CVE-2019-1323: Microsoft Windows Update Client Elevation of Privilege Vulnerability

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Oct 8, 2019
Added
Oct 8, 2019
Modified
Sep 5, 2025

Description

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336.

Solutions

microsoft-windows-windows_10-1809-kb4519338microsoft-windows-windows_10-1903-kb4517389microsoft-windows-windows_server_2019-1809-kb4519338msft-kb4517389-c417813c-d3db-4b44-83f8-60de59e73b91
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.