CVE-2019-0663 — Improper Initialization in Microsoft Windows

CWE-665 — Improper Initialization7 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
1.4%
top 19.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
18
Microsoft WindowsMicrosoft Windows ServerMicrosoft Windows 10+15 more
Timeline
PublishedMar 5
Latest updateMay 13

Description

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0621, CVE-2019-0661.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages16 packages

▶CVEListV5microsoft/windows14 versions+13
▶NVDmicrosoft/windowsr2, 1709, 1803+2

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-6fxj-cg6g-qp5h: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosur↗2022-05-13
▶
GHSA
GHSA-22xr-27f6-p2cr: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosur↗2022-05-13
▶
GHSA
GHSA-x38j-838v-5wq3: An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory↗2022-05-13
▶

📋Vendor Advisories

1
Microsoft
Windows Kernel Information Disclosure Vulnerability↗2019-02-12
▶
CVE-2019-0663 — Improper Initialization in Microsoft | cvebase