CVE-2019-1153: Microsoft Graphics Component Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1078, CVE-2019-1148.
Other sources
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1153?
CVE-2019-1153 has a severity rating of Important according to Microsoft's vulnerability guidelines.
How do I fix CVE-2019-1153?
To address CVE-2019-1153, you should apply the latest security updates provided by Microsoft for affected Windows and Office versions.
What products are affected by CVE-2019-1153?
CVE-2019-1153 affects multiple versions of Microsoft Windows and Office, including Windows 7, 8.1, 10, and Microsoft Office 2019.
What kind of vulnerability is CVE-2019-1153?
CVE-2019-1153 is classified as an information disclosure vulnerability within the Microsoft Windows Graphics Component.
Can CVE-2019-1153 be exploited remotely?
CVE-2019-1153 requires local access to exploit, making it less likely to be exploited remotely.