What’s Vulnerable › Vulnerabilities

CVE-2019-19364

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-12-04 · updated 2026-06-17
• Weakness: CWE-427

Description

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current directory; by doing so, an attacker can quickly escalate its privileges.

Affected products

• Sony Catalyst Browse: through 2019.1
• Sony Catalyst Production Suite: through 2019.1

References

• https://gist.github.com/Eli-Paz/482b514320009f3e76ea712cde3bc350
• https://gist.github.com/Eli-Paz/482b514320009f3e76ea712cde3bc350

Get alerted when CVE-2019-19364 or the next vulnerability affects your stack