CoreCVE
Back

MEDIUM

Windows Graphics Component Information Disclosure Vulnerability

Published Aug 14, 2019

Description

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage. The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner microsoft
Published Aug 14, 2019
Updated Aug 4, 2024
Reserved Nov 26, 2018
Link CVE-2019-1154
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-1154
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-1154
ENISA EUVD
Assigner microsoft
Published Aug 14, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-9726
EUVD-2019-9726