CVE-2019-12808

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-08-13 · updated 2026-06-17
Weakness: CWE-264

Description

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.

Affected products

ESTSOFT ALTOOLS Update Service: through 18.1

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35116
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35116

Get alerted when CVE-2019-12808 or the next vulnerability affects your stack