CVE-2019-0948

    Dashboard / Vulnerabilities / CVE-2019-0948

    CVE-2019-0948

    Published: 12 Jun 2019Last Modified: 10 Mar 2026

    Summary:

    Details: An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declaration. To exploit the vulnerability, an attacker could create a file containing specially crafted XML content and convince an authenticated user to import the file. The update addresses the vulnerability by modifying the way that the Event Viewer parses XML input.

    References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0948, https://www.zerodayinitiative.com/advisories/ZDI-19-641/, https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0948

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High