CVE-2019-1078: Microsoft Graphics Component Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1148, CVE-2019-1153.
Other sources
An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by running a specially crafted application. The update addresses the vulnerability by correcting how the Windows Graphics Component handles objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1078?
CVE-2019-1078 has a severity rating of important according to Microsoft's security assessment.
How do I fix CVE-2019-1078?
To mitigate CVE-2019-1078, users should apply the security update provided by Microsoft for their respective Windows versions.
What versions of Windows are impacted by CVE-2019-1078?
CVE-2019-1078 affects multiple versions of Windows, including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions.
What type of vulnerability is CVE-2019-1078?
CVE-2019-1078 is classified as an information disclosure vulnerability in the Windows Graphics component.
Can CVE-2019-1078 be exploited remotely?
CVE-2019-1078 requires local access to the affected system to exploit the information disclosure vulnerability.