CVE-2019-0574 describes an elevation of privilege vulnerability in the Windows Data Sharing Service (DSSVC) affecting Windows 10, Windows Server 2016, and Windows Server 2019. This flaw arises from the service's improper handling of file operations, specifically related to MoveFileInheritSecurity. With a CVSS score of 7.8 (High), successful exploitation could lead to high impact on confidentiality, integrity, and availability, typically requiring user interaction (UI:R) and local access (AV:L). While not actively exploited in the wild (KEV: No), public exploit code exists (EDB-46160), and the vulnerability has received some community and media attention, indicating its potential for exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* | ||
1607CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* | ||
1703CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* | ||
1709CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* | ||
1803CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.