An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.
To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application.
The security update addresses the vulnerability by correcting how the Storage Services handles file operations.
To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application.
The security update addresses the vulnerability by correcting how the Storage Services handles file operations.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 1803 | affected |
|
||||||
| Microsoft | Windows Server, version 1803 (Server Core Installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1809 | affected |
|
||||||
| Microsoft | Windows 10 Version 1809 | affected |
|
||||||
| Microsoft | Windows Server 2019 | affected |
|
||||||
| Microsoft | Windows Server 2019 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1709 for 32-bit Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1709 | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for x64-based Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | affected |
|
||||||
| Microsoft | Windows Server, version 1903 (Server Core installation) | affected |
|
Configuration 1 [-]
|
No data.
No data.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2019-1725 | An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application. The security update addresses the vulnerability by correcting how the Storage Services handles file operations. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 20 Feb 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft windows 10 1809
Microsoft windows Server 1803 Microsoft windows Server 1903 |
|
| CPEs | cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_server_1803:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft windows 10 1809
Microsoft windows Server 1803 Microsoft windows Server 1903 |
Tue, 20 May 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0983. | An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application. The security update addresses the vulnerability by correcting how the Storage Services handles file operations. |
| Title | Windows Storage Service Elevation of Privilege Vulnerability | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2025-05-20T17:50:03.495Z
Reserved: 2018-11-26T00:00:00.000Z
Link: CVE-2019-0998
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-06-12T14:29:02.447
Modified: 2025-05-20T18:15:34.493
Link: CVE-2019-0998
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses