CVE-2019-0840: Medium severity windows 10 vulnerability

Published Apr 9, 2019

Updated

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0844.

Affected Software

6 affected components

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0840

Event History

Apr 9, 2019

CVE Published

via MITRE·08:18 PM

Data Sourced

via MITRE·08:18 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0840?

CVE-2019-0840 has a severity rating of 'Important' according to Microsoft.

How do I fix CVE-2019-0840?

To fix CVE-2019-0840, apply the latest security updates released by Microsoft for affected Windows versions.

Which versions of Windows are affected by CVE-2019-0840?

CVE-2019-0840 affects Windows 10 versions 1709, 1803, 1809, and Windows Server 2016 and 2019.

What type of vulnerability is CVE-2019-0840?

CVE-2019-0840 is an information disclosure vulnerability caused by improper handling of objects in memory by the Windows kernel.

Can CVE-2019-0840 be exploited remotely?

CVE-2019-0840 cannot be directly exploited remotely but could allow an attacker to gain sensitive information if they already have access to the vulnerable system.