CVE-2019-1039

Windows Kernel Information Disclosure Vulnerability

Medium · published June 12, 2019

CVSS v3.1
5.5
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.

To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01352 · 71.3th percentile
Published
2019-06-12T13:49Z
EPSS history
Timeline
  • 12 JUN 13:49Z
    Windows Kernel Information Disclosure Vulnerability
    cvelistv5