Vulnerability Database

315,294

Total vulnerabilities in the database

CVE-2019-1336

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1323.

  • Published: Oct 10, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-1336
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / windows_10 1809 1809.x
microsoft / windows_server_2016 1903 1903.x
microsoft / windows_10 1903 1903.x