CVE-2019-1230 — Improper Input Validation in Microsoft Windows

CWE-20 — Improper Input ValidationCWE-1230 — Exposure of Sensitive Information Through Metadata6 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
2.7%
top 14.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Microsoft WindowsMicrosoft Windows ServerMicrosoft Windows 10+7 more
Timeline
PublishedOct 10
Latest updateAug 14

Description

An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Information Disclosure Vulnerability'.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:NExploitability: 2.3 | Impact: 4.0

Affected Packages10 packages

▶CVEListV5microsoft/windows4 versions+3

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-v3p4-hcqh-6pxm: An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input fro↗2022-05-24
▶

📋Vendor Advisories

2
Red Hat
postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table↗2025-08-14
▶
Microsoft
Hyper-V Information Disclosure Vulnerability↗2019-10-08
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday — Oct. 2019: Vulnerability disclosures and Snort coverage↗2019-10-08
▶
Talos
Microsoft Patch Tuesday — Oct. 2019: Vulnerability disclosures and Snort coverage↗2019-10-08
▶
CVE-2019-1230 — Improper Input Validation in Microsoft | cvebase