CVE-2019-1161

7.1
HIGHCVSS v3.1 Base Score
0.95%
LOW RiskEPSS (60th percentile)
NVD-CWE-noinfo

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted command that could exploit the vulnerability and delete protected files on an affected system once MpSigStub.exe ran again. The update addresses the vulnerability and blocks the arbitrary deletion.

Published: 8/14/2019
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

7.1HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CVSS v2 Score

6.6

AV:L/AC:L/Au:N/C:N/I:C/A:C

EPSS Score (Exploitation Probability)

0.95%LOW Exploitation Risk
60th percentile

This vulnerability has a 0.95% probability of being exploited in the next 30 days, ranking higher than 60% of all scored CVEs.

CWE Classification

NVD-CWE-noinfo
Advertisement