← volver
CVE-2019-1148

Microsoft Graphics Component Information Disclosure Vulnerability

CVSS 5.5 MEDIUMEPSS 2.8%CWE-125
Vexday Risk Score
33Atención
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
CVSS 5.5EPSS 2.8%KEV nãoPoC públicaNuclei Metasploit Patch
Ciclo de vida
14 ago 2019Publicada en NVD
15 ago 2019PoC pública
Recomendación: Planificar corrección próxima — ya existe PoC pública.
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →