{"metadata": {"vulnerability": "CVE-2019-16784", "count": 19, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 12}}, "data": [{"timestamp": "2019-09-24T00:00:00Z", "date_only": false, "value": "2019-09-24T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-16784", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-01-14T00:00:00Z", "date_only": true, "value": "2020-01-14", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2019-16784", "record": "GSD-2019-16784", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-01-14T20:10:12Z", "date_only": false, "value": "2020-01-14T20:10:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-16784", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-01-14T20:10:12Z", "date_only": false, "value": "2020-01-14T20:10:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2019-16784", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-01-14T20:15:00Z", "date_only": false, "value": "2020-01-14T20:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2020-175", "record": "PYSEC-2020-175", "field": "published"}, {"timestamp": "2020-01-14T20:15:00Z", "date_only": false, "value": "2020-01-14T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-16784", "record": "GSD-2019-16784", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-01-14T20:15:11.957Z", "date_only": false, "value": "2020-01-14T20:15:11.957", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-16784", "record": "FKIE_CVE-2019-16784", "field": "published"}, {"timestamp": "2020-01-16T22:18:27Z", "date_only": false, "value": "2020-01-16T22:18:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7FCJ-PQ9J-WH2R", "record": "GHSA-7FCJ-PQ9J-WH2R", "field": "published"}, {"timestamp": "2020-01-24T00:00:00Z", "date_only": true, "value": "2020-01-24", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2019-16784", "record": "GSD-2019-16784", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2020-10-09T13:40:00Z", "date_only": false, "value": "2020-10-09T13:40Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-16784", "record": "GSD-2019-16784", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-10-09T13:40:00Z", "date_only": false, "value": "2020-10-09T13:40:00Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2020-175", "record": "PYSEC-2020-175", "field": "modified"}, {"timestamp": "2023-12-13T01:23:40.336Z", "date_only": false, "value": "2023-12-13T01:23:40.336414Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-16784", "record": "GSD-2019-16784", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-28T05:38:02Z", "date_only": false, "value": "2023-12-28T05:38:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2198", "record": "CVE-2019-16784", "field": "creation_timestamp", "uuid": "6b729e0e-90de-4a24-96fc-cb54869376c4", "content": "#ExploitObserverAlert\n\nCVE-2019-16784\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2019-16784. In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in \"onefile\" mode is launched by a privileged user (at least more than the current one) which have his \"TempPath\" resolving to a world writable directory. This is the case for example if the software is launched as a service or as a scheduled task using a system account (TempPath will be C:\\Windows\\Temp). In order to be exploitable the software has to be (re)started after the attacker launch the exploit program, so for a service launched at startup, a service restart is needed (e.g. after a crash or an upgrade).\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/2198"}, {"timestamp": "2024-08-05T01:24:48.332Z", "date_only": false, "value": "2024-08-05T01:24:48.332Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-16784", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T01:24:48.332Z", "date_only": false, "value": "2024-08-05T01:24:48.332Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-16784", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-23T15:54:56Z", "date_only": false, "value": "2024-10-23T15:54:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7FCJ-PQ9J-WH2R", "record": "GHSA-7FCJ-PQ9J-WH2R", "field": "modified"}, {"timestamp": "2026-06-17T02:22:47.880Z", "date_only": false, "value": "2026-06-17T02:22:47.880", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-16784", "record": "FKIE_CVE-2019-16784", "field": "lastModified"}, {"timestamp": "2026-08-13T17:29:36Z", "date_only": false, "value": "2026-08-13T17:29:36Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PYINSTALLER-CVE-2019-16784", "record": "BREW-PYINSTALLER-CVE-2019-16784", "field": "published"}, {"timestamp": "2026-10-08T00:44:58Z", "date_only": false, "value": "2026-10-08T00:44:58Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PYINSTALLER-CVE-2019-16784", "record": "BREW-PYINSTALLER-CVE-2019-16784", "field": "modified"}]}
