An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka Windows Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
The product checks the state of a resource before using that resource, but the resource’s state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_server_2008 | Microsoft | r2 | r2 |
| Windows_server_2012 | Microsoft | r2 | r2 |
| Windows_server_2008 | Microsoft | r2 | r2 |
| Windows_10 | Microsoft | 1607 | 1607 |
| Windows_server_2016 | Microsoft | - | - |
| Windows_server_2008 | Microsoft | - | - |
| Windows_7 | Microsoft | - | - |
| Windows_rt_8.1 | Microsoft | - | - |
| Windows_10 | Microsoft | 1703 | 1703 |
| Windows_server_2012 | Microsoft | - | - |
| Windows_10 | Microsoft | - | - |
| Windows_10 | Microsoft | 1709 | 1709 |
| Windows_server_2016 | Microsoft | 1709 | 1709 |
| Windows_10 | Microsoft | 1803 | 1803 |
| Windows_server_2016 | Microsoft | 1803 | 1803 |
| Windows_server_2019 | Microsoft | - | - |
| Windows_10 | Microsoft | 1809 | 1809 |
| Windows_8.1 | Microsoft | - | - |