An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.
The security update addresses the vulnerability by correcting how CLFS handles objects in memory.
References
| Link | Resource |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0984 | |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0984 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 May 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 7.0 |
| Summary | (en) An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system. The security update addresses the vulnerability by correcting how CLFS handles objects in memory. |
21 Nov 2024, 04:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0984 - Patch, Vendor Advisory |
Information
Published : 2019-06-12 14:29
Updated : 2025-05-20 18:15
NVD link : CVE-2019-0984
Mitre link : CVE-2019-0984
CVE.ORG link : CVE-2019-0984
JSON object : View
Products Affected
microsoft
- windows_server_2016
- windows_rt_8.1
- windows_10
- windows_server_2008
- windows_7
- windows_server_2019
- windows_server_2012
- windows_8.1
CWE