CVE-2019-1932

CVE-2019-1932 is a local privilege escalation vulnerability affecting Cisco Advanced Malware Protection (AMP) for Endpoints for Windows. An authenticated, local attacker with administrator privileges can exploit insufficient validation of dynamically loaded modules by placing a malicious file in a specific system location. This allows the attacker to execute arbitrary code with the elevated privileges of the AMP service, leading to high impact on confidentiality, integrity, and availability. While rated as MEDIUM severity (CVSS 6.7), there is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.