CVE-2019-0848: Medium severity windows 10 vulnerability

Published Apr 9, 2019

Updated

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.

Affected Software

18 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0848

Event History

Apr 9, 2019

CVE Published

via MITRE·08:18 PM

Data Sourced

via MITRE·08:18 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0848?

CVE-2019-0848 has a severity rating of Important, indicating a moderate level of risk to users.

How do I fix CVE-2019-0848?

To mitigate CVE-2019-0848, ensure that your Windows operating system is updated with the latest security patches from Microsoft.

What are the affected software versions for CVE-2019-0848?

CVE-2019-0848 affects multiple versions of Microsoft Windows including Windows 10, Windows 7, Windows 8.1, and various Windows Server versions.

What type of vulnerability is CVE-2019-0848?

CVE-2019-0848 is classified as an information disclosure vulnerability related to the win32k component.

How can CVE-2019-0848 be exploited?

CVE-2019-0848 can be exploited if an attacker successfully runs a specially crafted application, potentially allowing access to sensitive kernel information.