CVE-2019-1423

CVE-2019-1423 is an elevation of privilege vulnerability in Microsoft Windows 10, specifically within the StartTileData.dll component, allowing for file creation in protected locations. With a CVSS score of 7.8 (High), a local attacker with low privileges can achieve high confidentiality, integrity, and availability impacts without user interaction. There is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei. While there is limited community discussion and media coverage, organizations should still apply the relevant patches to mitigate this risk.