{"id":11461,"date":"2019-10-15T00:03:00","date_gmt":"2019-10-14T22:03:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=11461"},"modified":"2020-12-13T07:39:11","modified_gmt":"2020-12-13T06:39:11","slug":"vulnerability-in-windows-10-update-assistant","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2019\/10\/15\/vulnerability-in-windows-10-update-assistant\/","title":{"rendered":"Vulnerability in Windows 10 Update Assistant"},"content":{"rendered":"

[German<\/a>]Microsoft has acknowledged a vulnerability in the Windows 10 Update Assistant that can be exploited to extend privileges. Uninstalling or updating the wizard is recommended. Here is some information about what you should know.<\/p>\n

<\/p>\n

What is the Windows 10 Update Assistant? <\/h2>\n

\"\"First of all, I would like to point out that this will not affect normal Windows 10 users who never used the Windows 10 Update Assistant. The program must have been explicitly downloaded by someone and installed with administrative privileges under Windows 10. The Windows 10 Update Assistant can be downloaded in Windows 10 from this Microsoft<\/a> site. The wizard was also offered on the Windows 10 upgrade page (see screenshot).<\/p>\n

\"Windows <\/p>\n

The Windows 10 Update Assistant downloads and installs feature updates on a running Windows 10 system. This is helpful if such a feature update usually fails due to compatibility issues. The Assistant checks for compatibility and provides instructions on what to do to prevent upgrading to a new version of Windows 10. <\/p>\n

The vulnerability CVE-2019-1378<\/h2>\n

On October 8, 2019, Microsoft released the Security Advisory CVE-2019-1378<\/a> warning about an Elevation of Privilege vulnerability in the Windows 10 Update Assistant. In the Windows 10 Update Assistant, there is a privilege management issue that allows a program to extended privileges.<\/p>\n

A locally authenticated attacker could execute arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs, view, modify, or delete data, or create new accounts with full user privileges.<\/p>\n

Microsoft states that the vulnerability is not being exploited and considers the exploitability to be low because the attacker must already be on the system. However, the vulnerability is classified as Important. <\/p>\n

What can you do?<\/h2>\n

On its Security Advisory for CVE-2019-1378<\/a>, Microsoft gives concrete advice on what you can check and do. <\/p>\n