← Back

CVE-2019-1153

nvd nist
Published: Aug 14, 2019Modified: Feb 20, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.

Affected (20)

9 products
Office
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008
Windows Server 2012
Windows Server 2016
Windows Server 2019
Configuration A
20 vulnerable
Vulnerable SoftwareAffected Versions
Version 2019
Microsoft
All versions
Version 1607
Version 1703
Version 1709
Version 1803
Version 1809
Version 1903
All versions
All versions
All versions
Microsoft
All versions
Version r2 sp1
Version r2 sp1
Microsoft
All versions
Version r2
Microsoft
All versions
Version 1803
Version 1903
All versions

Timeline

No history available yet.