CVE-2019-0693 - An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'

Back Back to CVE browser

HIGH

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'

Published Apr 8, 2019

7.8

HIGH

CVSS 3.0

EPSS 0.93%

Description

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0692, CVE-2019-0694.

Affected products

Vendor Microsoft Product Windows Default
n/a
- Version
  10 Version 1709 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for x64-based Systems
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server Default
n/a
- Version
  2019
  Status
  affected
  Constraints
  -
- Version
  2019 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  version 1709 (Core Installation)
  Status
  affected
  Constraints
  -
- Version
  version 1803 (Core Installation)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows

n/a

Version	Status	Constraints
10 Version 1709 for 32-bit Systems	affected	-
10 Version 1709 for ARM64-based Systems	affected	-
10 Version 1709 for x64-based Systems	affected	-
10 Version 1803 for 32-bit Systems	affected	-
10 Version 1803 for ARM64-based Systems	affected	-
10 Version 1803 for x64-based Systems	affected	-
10 Version 1809 for 32-bit Systems	affected	-
10 Version 1809 for ARM64-based Systems	affected	-
10 Version 1809 for x64-based Systems	affected	-

Microsoft

Windows Server

n/a

Version	Status	Constraints
2019	affected	-
2019 (Core installation)	affected	-
version 1709 (Core Installation)	affected	-
version 1803 (Core Installation)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0693
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0693		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Apr 8, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0693

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0693

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0693