CVE-2019-0597: Critical severity windows 10 vulnerability

Published Mar 5, 2019

Updated

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.

Affected Software

18 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0597

Event History

Mar 5, 2019

CVE Published

11:29 PM

Mar 6, 2019

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0597?

CVE-2019-0597 has a severity rating of Critical according to Microsoft.

How do I fix CVE-2019-0597?

To fix CVE-2019-0597, apply the security updates provided by Microsoft for affected Windows versions.

What are the affected software versions for CVE-2019-0597?

CVE-2019-0597 affects various editions of Windows 7, 8.1, 10, and Windows Server versions.

What types of attacks could exploit CVE-2019-0597?

CVE-2019-0597 could allow attackers to execute arbitrary code on the affected system through specially crafted files.

Is there a workaround for CVE-2019-0597?

There are no known workarounds for CVE-2019-0597; applying updates is the recommended action.