Rewterz Threat Advisory – CVE-2019-8790 – Swift for Ubuntu Information disclosure vulnerability

Rewterz Threat Alert – OpenCarrot Malware Identified in Financial Sector

October 15, 2019

Rewterz Threat Advisory – CVE-2019-1378 – Windows 10 Update Assistant Elevation of Privilege Vulnerability

Severity

Medium

Analysis Summary

An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.

A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Impact

Privilege access

Affected Vendors

Microsoft

Affected Products

Windows 10 Update Assistant

Remediation

Please see vendor’s advisory for the list of patches and more details

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1378

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo