CVE-2019-0726 | ByteOS Network

Vulnerability Details :

CVE-2019-0726

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-08 Apr, 2019 | 23:38

Updated At-04 Aug, 2024 | 17:58

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:08 Apr, 2019 | 23:38

Updated At:04 Aug, 2024 | 17:58

▼CVE Numbering Authority (CNA)

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.

Affected Products

Vendor

Microsoft Corporation

Product

Versions

Affected

10 Version 1803 for 32-bit Systems
10 Version 1803 for x64-based Systems
10 Version 1803 for ARM64-based Systems
10 Version 1809 for 32-bit Systems
10 Version 1809 for x64-based Systems
10 Version 1809 for ARM64-based Systems

Vendor

Microsoft Corporation

Product

Versions

Affected

version 1803 (Core Installation)
2019
2019 (Core installation)

Problem Types

Type	CWE ID	Description
text	N/A	Remote Code Execution

Type: text

CWE ID: N/A

Description: Remote Code Execution

References

Hyperlink	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0726	x_refsource_CONFIRM

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0726

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0726	x_refsource_CONFIRM x_transferred

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0726

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:secure@microsoft.com

Published At:09 Apr, 2019 | 00:29

Updated At:24 Aug, 2020 | 17:37

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Microsoft Corporation

>>windows_10>>1803

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10>>1809

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2016>>1803

cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2019>>*

cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0726	secure@microsoft.com	Patch Vendor Advisory

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0726

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory