CVE-2019-19954

CVE-2019-19954 describes a local privilege escalation vulnerability affecting Signal Desktop versions prior to 1.29.1 on Windows. An attacker could exploit this by creating a malicious wmic.exe file in a specific directory, which Signal Desktop would then execute with elevated privileges. This vulnerability has a CVSS score of 7.3 (High), indicating a low attack complexity and requiring user interaction, but leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.