CVE-2019-18279

In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated privileges. Adverse impacts are limited to the Windows environment and there is no known direct impact to the UEFI firmware. This was fixed in late June 2019.

• https://eclypsium.com/2019/08/10/screwed-drivers-signed-sealed-delivered/Third Party Advisory
• https://eclypsium.com/wp-content/uploads/2019/08/EXTERNAL-Get-off-the-kernel-if-you-cant-drive-DEFCON27.pdfThird Party Advisory
• https://www.phoenix.com/content/uploads/Security-Newsletter-September-2019.pdfVendor Advisory
• https://eclypsium.com/2019/08/10/screwed-drivers-signed-sealed-delivered/Third Party Advisory
• https://eclypsium.com/wp-content/uploads/2019/08/EXTERNAL-Get-off-the-kernel-if-you-cant-drive-DEFCON27.pdfThird Party Advisory
• https://www.phoenix.com/content/uploads/Security-Newsletter-September-2019.pdfVendor Advisory

Published

Nov 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18271OSIsoft PI Vision, All versions of PI Vision prior to 2019. …8.8
• CVE-2019-18273OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 S…4.8
• CVE-2019-18275OSIsoft PI Vision, All versions of PI Vision prior to 2019. …6.5
• CVE-2019-18276An issue was discovered in disable_priv_mode in shell.c in G…7.8
• CVE-2019-18277A flaw was found in HAProxy before 2.0.6. In legacy mode, me…7.5
• CVE-2019-18278When executing VideoLAN VLC media player 3.0.8 with libqt on…7.8
• CVE-2019-1828A vulnerability in the web-based management interface of Cis…5.9
• CVE-2019-18280Sourcecodester Online Grading System 1.0 is affected by a Cr…8.8
• CVE-2019-18281An out-of-bounds memory access in the generateDirectionalRun…4.3
• CVE-2019-18282The flow_dissector feature in the Linux kernel 4.3 through 5…5.3
• CVE-2019-18283A vulnerability has been identified in SPPA-T3000 Applicatio…9.8
• CVE-2019-18284A vulnerability has been identified in SPPA-T3000 Applicatio…9.8