What is the severity of CVE-2019-1466?

CVE-2019-1466 is classified with a severity rating of important, which indicates a moderate risk to affected systems.

How do I fix CVE-2019-1466?

To fix CVE-2019-1466, apply the latest security updates provided by Microsoft for Windows and relevant server versions.

Which Windows versions are affected by CVE-2019-1466?

CVE-2019-1466 affects multiple versions of Windows including Windows 7, 8.1, 10, and several Windows Server editions.

Can CVE-2019-1466 lead to remote attacks?

Yes, CVE-2019-1466 can allow remote attackers to access sensitive information contained in system memory.

What is the nature of the vulnerability in CVE-2019-1466?

CVE-2019-1466 is an information disclosure vulnerability that occurs due to improper memory handling by the Windows GDI component.

Vulnerability/
CVE-2019-1466

medium

6.5

CWE

125

10/12/2019

4/8/2024

CVE-2019-1466: Microsoft Windows EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

First published: Tue Dec 10 2019(Updated: )

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1467.

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows
Microsoft Windows 10
Microsoft Windows 10	=1607
Microsoft Windows 10	=1709
Microsoft Windows 10	=1803
Microsoft Windows 10	=1809
Microsoft Windows 10	=1903
Microsoft Windows 10	=1909
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows RT
Microsoft Windows Server 2008 Itanium	=sp2
Microsoft Windows Server 2008 Itanium	=sp2
Microsoft Windows Server 2008 Itanium	=r2-sp1
Microsoft Windows Server 2012 x64
Microsoft Windows Server 2012 x64	=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016	=1803
Microsoft Windows Server 2016	=1903
Microsoft Windows Server 2016	=1909
Microsoft Windows Server 2019

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1466

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-1466?
CVE-2019-1466 is classified with a severity rating of important, which indicates a moderate risk to affected systems.
How do I fix CVE-2019-1466?
To fix CVE-2019-1466, apply the latest security updates provided by Microsoft for Windows and relevant server versions.
Which Windows versions are affected by CVE-2019-1466?
CVE-2019-1466 affects multiple versions of Windows including Windows 7, 8.1, 10, and several Windows Server editions.
Can CVE-2019-1466 lead to remote attacks?
Yes, CVE-2019-1466 can allow remote attackers to access sensitive information contained in system memory.
What is the nature of the vulnerability in CVE-2019-1466?
CVE-2019-1466 is an information disclosure vulnerability that occurs due to improper memory handling by the Windows GDI component.

agent/references
agent/type
agent/title
agent/remedy
agent/weakness
agent/severity
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
collector/zdi-advisory
source/ZDI
alias/ZDI-19-1007
alias/ZDI-CAN-9344
alias/CVE-2019-1466
agent/software-canonical-lookup
agent/event
agent/trending
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/microsoft windows
canonical/microsoft windows 10
version/microsoft windows 10/1607
version/microsoft windows 10/1709
version/microsoft windows 10/1803
version/microsoft windows 10/1809
version/microsoft windows 10/1903
version/microsoft windows 10/1909
canonical/microsoft windows 7
canonical/microsoft windows 8.1
canonical/microsoft windows rt
canonical/microsoft windows server 2008 itanium
version/microsoft windows server 2008 itanium/sp2
version/microsoft windows server 2008 itanium/r2-sp1
canonical/microsoft windows server 2012 x64
version/microsoft windows server 2012 x64/r2
canonical/microsoft windows server 2016
version/microsoft windows server 2016/1803
version/microsoft windows server 2016/1903
version/microsoft windows server 2016/1909
canonical/microsoft windows server 2019

Frequently Asked Questions

What is the severity of CVE-2019-1466?
CVE-2019-1466 is classified with a severity rating of important, which indicates a moderate risk to affected systems.
How do I fix CVE-2019-1466?
To fix CVE-2019-1466, apply the latest security updates provided by Microsoft for Windows and relevant server versions.
Which Windows versions are affected by CVE-2019-1466?
CVE-2019-1466 affects multiple versions of Windows including Windows 7, 8.1, 10, and several Windows Server editions.
Can CVE-2019-1466 lead to remote attacks?
Yes, CVE-2019-1466 can allow remote attackers to access sensitive information contained in system memory.
What is the nature of the vulnerability in CVE-2019-1466?
CVE-2019-1466 is an information disclosure vulnerability that occurs due to improper memory handling by the Windows GDI component.

CVE-2019-1466: Microsoft Windows EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-1466?

How do I fix CVE-2019-1466?

Which Windows versions are affected by CVE-2019-1466?

Can CVE-2019-1466 lead to remote attacks?

What is the nature of the vulnerability in CVE-2019-1466?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2019-1466?

How do I fix CVE-2019-1466?

Which Windows versions are affected by CVE-2019-1466?

Can CVE-2019-1466 lead to remote attacks?

What is the nature of the vulnerability in CVE-2019-1466?