CVE-2019-19470: Tinywall

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and including 2.1.12. Fixed in version 2.1.13.

Affected products

• Tinywall Tinywall: before 2.1.13 (fixed in 2.1.13)

Published 2019-12-30. Last modified 2026-06-17.