CVE-2019-13208

CVE-2019-13208 describes a privilege escalation vulnerability in WavesSysSvc, specifically affecting Waves MAXX Audio version 1.9.29.0. The vulnerability stems from improper access controls on a registry key, allowing the Users group Full Control, which enables DLL side-loading. This high-severity vulnerability (CVSS 7.3) could lead to a complete compromise of confidentiality, integrity, and availability if a local, low-privileged attacker successfully tricks a user into executing a malicious DLL. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.