CVE-2018-19113

CVE-2018-19113 describes a privilege escalation vulnerability in the Pronestor PNHM (Health Monitoring) add-in for Outlook, affecting versions prior to 8.1.13.0. The vulnerability stems from overly permissive file permissions ("BUILTIN\Users:(I)(F)") on the PronestorHealthMonitor.exe file, allowing a local attacker to replace it with a malicious Trojan horse. With a CVSS score of 7.3 (HIGH), this flaw has a low attack complexity and requires local user interaction, but can lead to high impact on confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, an exploit (EDB-46988) exists for versions prior to 8.1.11.0, though there is no evidence of active exploitation or significant community discussion.