CVE2019

CVE-2019-1388

1Rules

2References

1Folders

2024-12-01Latest

Summary

CVE-2019-1388 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2019. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threatcriticalstable

Exploiting CVE-2019-1388

Detects an exploitation attempt in which the UAC consent dialogue is used to invoke an Internet Explorer process running as LOCAL_SYSTEM

WindowsProcess Creation

TA0004 · Privilege EscalationT1068 · Exploitation for Privilege Escalationcve.2019-1388detection.emerging-threats

Florian Roth (Nextron Systems)Wed Nov 202019

References

Resolving title…

portal.msrc.microsoft.com

Resolving title…

zerodayinitiative.com