CVE-2019-1148: Microsoft Graphics Component Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1078, CVE-2019-1153.
Other sources
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1148?
CVE-2019-1148 has a severity rating of important.
How do I fix CVE-2019-1148?
To fix CVE-2019-1148, apply the latest Microsoft security updates available for your affected software.
What products are affected by CVE-2019-1148?
CVE-2019-1148 affects Microsoft Windows 7, Windows 8.1, Windows 10, various versions of Microsoft Office, and multiple Windows Server editions.
What type of vulnerability is CVE-2019-1148?
CVE-2019-1148 is an information disclosure vulnerability associated with improper handling of objects in memory by the Microsoft Windows Graphics Component.
Can CVE-2019-1148 be exploited remotely?
Yes, CVE-2019-1148 can potentially be exploited remotely if a user opens a specially crafted file.