CVE-2019-1318: Medium severity windows 10 vulnerability
Published Oct 10, 2019
·Updated
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
Affected Software
19 affected components
Microsoft Windows 10
Microsoft Windows 10=1607
Microsoft Windows 10=1703
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1903
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=1803
Microsoft Windows Server 2016=1903
Microsoft Windows Server 2019
Remediation
Event History
Oct 10, 2019
CVE Published
via MITRE·01:28 PM
Data Sourced
via MITRE·01:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-1318?
CVE-2019-1318 has a severity rating of critical.
2
How do I fix CVE-2019-1318?
You can fix CVE-2019-1318 by applying the appropriate security update provided by Microsoft for your affected version of Windows.
3
Which versions of Windows are affected by CVE-2019-1318?
CVE-2019-1318 affects various versions including Windows 7, Windows 8.1, Windows 10, and multiple Windows Server versions.
4
What is the impact of CVE-2019-1318?
The impact of CVE-2019-1318 is primarily spoofing, which can allow an attacker to impersonate a legitimate user.
5
Is CVE-2019-1318 actively exploited in the wild?
As of the last updates, CVE-2019-1318 was noted to be actively exploited, making immediate action advisable.