CVE-2019-0755Improper Initialization in Microsoft Windows

Severity
5.5MEDIUMNVD
NVD4.7
EPSS
0.4%
top 36.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 9
Latest updateMay 13

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages23 packages

Patches

🔴Vulnerability Details

5
GHSA
GHSA-39w9-j3qh-wmx9: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information2022-05-13
GHSA
GHSA-f26g-rgwg-4vxw: An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory2022-05-13
GHSA
GHSA-v3pc-4334-h2v7: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosur2022-05-13
GHSA
GHSA-xp23-4cw6-346h: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosur2022-05-13
GHSA
GHSA-m68c-mfwr-9xpc: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosur2022-05-13

📋Vendor Advisories

3
Microsoft
A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC files are created in a private subdirectory of the install2019-04-09
Red Hat
samba: World writable files in Samba AD DC private/ dir2019-04-09
Microsoft
Windows Kernel Information Disclosure Vulnerability2019-03-12

🕵️Threat Intelligence

1
Zscaler
Zscaler found Multiple Security Vulnerabilities | 03-12-201

💬Community

1
Bugzilla
CVE-2019-3870 samba: World writable files in Samba AD DC private/ dir2019-03-14
CVE-2019-0755 — Improper Initialization in Microsoft | cvebase