CVE-2019-0552

An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

• CWE-863

• http://www.securityfocus.com/bid/106407Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0552Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/46162/Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/106407Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0552Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/46162/Exploit, Third Party Advisory

Published

Jan 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0546A remote code execution vulnerability exists in Visual Studi…
• CVE-2019-0547A memory corruption vulnerability exists in the Windows DHCP…
• CVE-2019-0548A denial of service vulnerability exists when ASP.NET Core i…
• CVE-2019-0549An information disclosure vulnerability exists when the Wind…
• CVE-2019-0550A remote code execution vulnerability exists when Windows Hy…
• CVE-2019-0551A remote code execution vulnerability exists when Windows Hy…
• CVE-2019-0553An information disclosure vulnerability exists when Windows …
• CVE-2019-0554An information disclosure vulnerability exists when the Wind…
• CVE-2019-0555An elevation of privilege vulnerability exists in the Micros…
• CVE-2019-0556A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2019-0557A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2019-0558A cross-site-scripting (XSS) vulnerability exists when Micro…5.4