CVE-2019-0776

EUVD-2019-1532
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4489872
1607 (x64, x86)
KB4489882
1703 (x64, x86)
KB4489871
1709 (arm64, x64, x86)
KB4489886
1803 (arm64, x64, x86)
KB4489868
1809 (arm64, x64, x86)
KB4489899
Windows Server
1709 Server Core
KB4489886
1803 Server Core
KB4489868
Windows Server 2016
Server Core
KB4489882
Standard
KB4489882
Windows Server 2019
Server Core
KB4489899
Standard
KB4489899
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0776
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0776