CVE-2019-1025: Windows Denial of Service Vulnerability

Published Jun 11, 2019
·
Updated

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

Other sources

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application or to convince a user to open a specific file on a network share. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding. The update addresses the vulnerability by correcting how Windows handles objects in memory.

Microsoft

Affected Software

60 affected componentsFixes available
Microsoft Windows 10
Microsoft Windows 10=1607
Microsoft Windows 10=1703
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1903
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=1803
Microsoft Windows Server 2016=1903
Microsoft Windows Server 2019
Microsoft Windows 10=1803
Microsoft Windows Server 2019
Microsoft Windows 10=1607
Microsoft Windows Server 2016
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows 10=1703
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows 10=1809
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows 10=1903
Microsoft Windows Server 2008 for Itanium-Based Systems
Microsoft Windows 10=1703
Microsoft Windows Server 2019
Microsoft Windows 8.1 for 32-bit systems
Microsoft Windows Server 2008 R2 for Itanium-Based Systems
Microsoft Windows 10=1709
Microsoft Windows 10
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows 10
Microsoft Windows 10=1903
Microsoft Windows RT 8.1
Microsoft Windows Server 2016
Microsoft Windows 10=1709
Microsoft Windows 10=1903
Microsoft Windows 10=1803
Microsoft Windows 10=1607
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 8.1 for x64-based systems
Microsoft Windows Server=1903
Microsoft Windows 10=1803
Microsoft Windows Server=1803
Microsoft Windows 10=1709
Microsoft Windows Server 2008

Event History

Jun 11, 2019
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Jun 12, 2019
CVE Published
via MITRE·01:49 PM
Data Sourced
via MITRE·01:49 PM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2019-1025?

CVE-2019-1025 is classified as a denial of service vulnerability that can cause affected systems to stop responding.

2

How do I fix CVE-2019-1025?

To fix CVE-2019-1025, apply the latest security updates provided by Microsoft for the affected versions of Windows.

3

Which Windows versions are affected by CVE-2019-1025?

CVE-2019-1025 affects several versions of Windows, including Windows 7, Windows 10, and various Windows Server editions.

4

What are the potential impacts of exploiting CVE-2019-1025?

Exploitation of CVE-2019-1025 can lead to denial of service, causing affected systems to crash or become unresponsive.

5

Is there any workaround for CVE-2019-1025?

There are no known workarounds for CVE-2019-1025; applying the security patch is the recommended action.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203