CVE-2019-0553 — Sensitive Information Exposure in Microsoft Windows 10

6 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 45.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Microsoft Windows 10Microsoft Windows 10 ServersMicrosoft Windows Server 2019+1 more
Timeline
PublishedJan 8
Latest updateMay 13

Description

An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶CVEListV5microsoft/windows_10_serversversion 1709 (Server Core Installation), version 1803 (Server Core Installation)+1
▶CVEListV5microsoft/windows_server_2019(Server Core installation)
▶NVDmicrosoft/windows1709, 1803+1
▶CVEListV5microsoft/windows_1011 versions+10
▶NVDmicrosoft/windows_104 versions+3

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p85g-g2xq-mxcw: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux↗2022-05-13
▶
CVEList
CVE-2019-0553: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux↗2019-01-08
▶

📋Vendor Advisories

1
Microsoft
Windows Subsystem for Linux Information Disclosure Vulnerability↗2019-01-08
▶

💬Community

2
Bugzilla
CVE-2019-11291 rabbitmq-server: not properly sanitized user input may lead to XSS↗2019-12-13
▶
Bugzilla
CVE-2018-14041 bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy↗2018-07-16
▶
CVE-2019-0553 — Sensitive Information Exposure | cvebase