CVE-2019-1227Sensitive Information Exposure in Microsoft Windows 10 Version 1803

Severity
5.5MEDIUMNVD
EPSS
1.0%
top 22.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 14
Latest updateMar 7

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Patches

🔴Vulnerability Details

2
GHSA
GHSA-4mw3-66hq-5p8q: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosur2022-05-24
GHSA
GHSA-q97c-cvcg-2fpv: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosur2022-05-24

📋Vendor Advisories

2
Chrome
Stable Channel Update for Desktop: CVE-2023-12252023-03-07
Microsoft
Windows Kernel Information Disclosure Vulnerability2019-08-13

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage2019-08-13
Talos
Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage2019-08-13

💬Community

2
Bugzilla
CVE-2019-20798 cherokee: XSS in the administrator panel2020-05-25
Bugzilla
CVE-2017-18594 nmap: denial of service condition due to a double free when SSH connection fails2019-09-05
CVE-2019-1227 — Sensitive Information Exposure | cvebase