Microsoft Windows Multiple Vulnerabilities (KB4519338)

Published: 2019-10-10 08:53:24
CVE Author: NIST National Vulnerability Database (NVD)

CVSS Base Vector:

This host is missing a critical security update according to Microsoft KB4519338

Detection Method:
Checks if a vulnerable version is present on the target host.

Technical Details:
Multiple flaws exists due to, - Microsoft Browsers does not properly parse HTTP content. - Microsoft XML Core Services MSXML parser improperly processes user input. - Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system. - Windows kernel improperly handles objects in memory. - Windows Error Reporting (WER) improperly handles and executes files. - Microsoft Windows Update Client does not properly handle privileges. - Windows Error Reporting manager improperly handles hard links. - Microsoft browsers improperly handle requests of different origins. For more information about the vulnerabilities refer Reference links.

Successful exploitation will allow an attacker to run arbitrary code in kernel mode, obtain information to further compromise a user's system, elevate permissions and create a denial of service condition causing the target system to become unresponsive.

Affected Versions:
Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows 10 Version 1809 for 32-bit Systems

The vendor has released updates. Please see the references for more information.

Solution Type:
Vendor Patch

Detection Type:

NIST (National Institute of Standards and Technology) NVD (National Vulnerability Database)


CVSS Score

You never have to pay for a vulnerability scanning and management software again.

Tired of paying a subscription 'per asset' or 'per IP'? Well you can officially cancel your current subscription. Mageni provides a free, open source and enterprise-ready vulnerability scanning and management platform which helps you to find, prioritize, remediate and manage your vulnerabilities. It is free and always will be.