CVE-2019-1158: Windows Graphics Component Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1143, CVE-2019-1154.
Other sources
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage. The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1158?
The severity of CVE-2019-1158 is rated as important by Microsoft.
How do I fix CVE-2019-1158?
To fix CVE-2019-1158, ensure your system is updated with the latest security patches provided by Microsoft.
Which software versions are affected by CVE-2019-1158?
CVE-2019-1158 affects various versions of Microsoft Windows including Windows 7, Windows 8.1, Windows 10, and several Windows Server editions.
What type of vulnerability is CVE-2019-1158?
CVE-2019-1158 is an information disclosure vulnerability related to the Windows GDI component.
Can CVE-2019-1158 allow attackers to exploit my system?
While CVE-2019-1158 does not allow remote code execution, it does expose sensitive information which can be leveraged by attackers.