Lucene search
HistorySep 03, 2019 - 6:15 p.m.
CVE-2019-1125
cve-2019-1125
windows
kernel
info disclosure
vulnerability
cpu
memory access
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
5.6
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
35.1%
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information that could be used to try to compromise the affected system further.
On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities (known as Spectre) involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. This vulnerability, released on August 6, 2019, is a variant of the Spectre Variant 1 speculative execution side channel vulnerability and has been assigned CVE-2019-1125.
Microsoft released a security update on July 9, 2019 that addresses the vulnerability through a software change that mitigates how the CPU speculatively accesses memory. Note that this vulnerability does not require a microcode update from your device OEM.
Affected configurations
Node
microsoftwindows_10Match1703
Node
microsoftwindows_10_1809Range10.0.0–10.0.0
Node
microsoftwindows_server_1803Range10.0.0–10.0.0
Node
microsoftwindows_10_1809Range10.0.0–10.0.0
Node
microsoftwindows_server_2019Range10.0.0–10.0.0
Node
microsoftwindows_server_2019Range10.0.0–10.0.0
Node
microsoftwindows_10Match1709x32
Node
microsoftwindows_10Match1709
Node
microsoftwindows_10Match1903x32
Node
microsoftwindows_10Match1903x64
Node
microsoftwindows_10Match1903arm64
Node
microsoftwindows_server_1903Range10.0.0–10.0.0
Node
microsoftwindows_10_1507Range10.0.0–10.0.0
Node
microsoftwindows_10_1607Range10.0.0–10.0.0
Node
microsoftwindows_server_2016Range10.0.0–10.0.0
Node
microsoftwindows_server_2016Range10.0.0–10.0.0
Node
microsoftwindows_7Range6.1.0–6.1.0
Node
microsoftwindows_7Range6.1.0–6.1.0sp1
Node
microsoftwindows_8.1Match8.1
Node
microsoftwindows_server_2008_sp2Range6.0.0–6.0.0sp2
Node
microsoftwindows_server_2008_sp2Range6.0.0–6.0.0sp2
Node
microsoftwindows_server_2008_sp2Range6.0.0–6.0.0sp2
Node
microsoftwindows_server_2008_r2_sp1Range6.1.0–6.1.0sp1
Node
microsoftwindows_server_2008_r2_sp1Range6.1.0–6.1.0sp1
Node
microsoftwindows_server_2008_r2_sp1Range6.0.0–6.0.0sp1
Node
microsoftwindows_server_2012Range6.2.0–6.2.0
Node
microsoftwindows_server_2012Range6.2.0–6.2.0
Node
microsoftwindows_server_2012Range6.3.0–6.3.0r2
Node
microsoftwindows_server_2012Range6.3.0–6.3.0r2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1703",
"cpes": [
"cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*"
],
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1803",
"cpes": [
"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*",
"cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"
],
"platforms": [
"32-bit Systems",
"x64-based Systems",
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server, version 1803 (Server Core Installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_1803:*:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1809",
"cpes": [
"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"
],
"platforms": [
"32-bit Systems",
"x64-based Systems",
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019 (Server Core installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1709 for 32-bit Systems",
"cpes": [
"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"
],
"platforms": [
"32-bit Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1709",
"cpes": [
"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems",
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1903 for 32-bit Systems",
"cpes": [
"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
],
"platforms": [
"Unknown"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1903 for x64-based Systems",
"cpes": [
"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
],
"platforms": [
"Unknown"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1903 for ARM64-based Systems",
"cpes": [
"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"
],
"platforms": [
"Unknown"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server, version 1903 (Server Core installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1507",
"cpes": [
"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*"
],
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 10 Version 1607",
"cpes": [
"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*"
],
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016 (Server Core installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 7",
"cpes": [
"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*"
],
"platforms": [
"32-bit Systems"
],
"versions": [
{
"version": "6.1.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 7 Service Pack 1",
"cpes": [
"cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.1.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 8.1",
"cpes": [
"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*",
"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
"cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*"
],
"platforms": [
"32-bit Systems",
"x64-based Systems",
"ARM64-based Systems"
],
"versions": [
{
"version": "6.3.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 Service Pack 2",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*"
],
"platforms": [
"32-bit Systems",
"IA64-based Systems"
],
"versions": [
{
"version": "6.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*",
"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
],
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "6.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 Service Pack 2",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 R2 Systems Service Pack 1",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:itanium:*"
],
"platforms": [
"IA64-based Systems"
],
"versions": [
{
"version": "6.1.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 R2 Service Pack 1",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.1.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.0.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.2.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 (Server Core installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.2.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.3.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2 (Server Core installation)",
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
],
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "6.3.0",
"lessThan": "publication",
"versionType": "custom",
"status": "affected"
}
]
}
]References
packetstormsecurity.com/files/156337/SWAPGS-Attack-Proof-Of-Concept.html
www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-swapgs-en
access.redhat.com/errata/RHBA-2019:2824
access.redhat.com/errata/RHBA-2019:3248
access.redhat.com/errata/RHSA-2019:2600
access.redhat.com/errata/RHSA-2019:2609
access.redhat.com/errata/RHSA-2019:2695
access.redhat.com/errata/RHSA-2019:2696
access.redhat.com/errata/RHSA-2019:2730
access.redhat.com/errata/RHSA-2019:2899
access.redhat.com/errata/RHSA-2019:2900
access.redhat.com/errata/RHSA-2019:2975
access.redhat.com/errata/RHSA-2019:3011
access.redhat.com/errata/RHSA-2019:3220
kc.mcafee.com/corporate/index?page=content&id=SB10297
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1125
www.synology.com/security/advisory/Synology_SA_19_32
Related
fedora
fedora
[SECURITY] Fedora 29 Update: kernel-tools-5.2.7-100.fc29
2019-08-11 01:43:14
[SECURITY] Fedora 29 Update: kernel-headers-5.2.7-100.fc29
2019-08-11 01:43:14
[SECURITY] Fedora 30 Update: kernel-headers-5.2.7-200.fc30
2019-08-11 01:15:14
kaspersky
kaspersky
KLA11696 OSI vulnerability in Microsoft products (ESU)
2019-08-06 00:00:00
KLA11700 OSI vulnerability in Microsoft products (ESU)
2019-08-06 00:00:00
KLA11529 Windows Kernel Information Disclosure Vulnerability
2019-08-06 00:00:00
nessus
nessus
Amazon Linux 2 : kernel (ALAS-2019-1253)
2019-08-12 00:00:00
Amazon Linux AMI : kernel (ALAS-2019-1253)
2019-08-12 00:00:00
RHEL 6 : kernel (RHSA-2019:2695)
2019-09-11 00:00:00
openvas
openvas
Fedora Update for kernel-tools FEDORA-2019-e37c348348
2019-08-12 00:00:00
Ubuntu: Security Advisory (USN-4096-1)
2019-08-14 00:00:00
Fedora Update for kernel-headers FEDORA-2019-e37c348348
2019-08-12 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2019-08-06 00:00:00
Unbreakable Enterprise kernel security update
2019-09-09 00:00:00
Unbreakable Enterprise kernel security update
2019-08-06 00:00:00
debiancve
debiancve
CVE-2019-1125
2019-09-03 18:15:12
nvd
nvd
CVE-2019-1125
2019-09-03 18:15:12
redhat
redhat
(RHSA-2019:3011) Moderate: Red Hat Virtualization security, bug fix, and enhancement update
2019-10-10 14:48:00
(RHSA-2019:2695) Moderate: kernel security and bug fix update
2019-09-10 09:57:53
(RHSA-2019:2975) Important: kernel security and bug fix update
2019-10-08 09:20:26
thn
thn
SWAPGS Attack — New Speculative Execution Flaw Affects All Modern Intel CPUs
2019-08-06 20:00:00
cisa
cisa
SWAPGS Spectre Side-Channel Vulnerability
2019-08-06 00:00:00
exploitpack
exploitpack
Windows Kernel - Information Disclosure
2020-01-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-1125
2019-08-06 00:00:00
cvelist
cvelist
CVE-2019-1125 Windows Kernel Information Disclosure Vulnerability
2019-09-03 17:52:41
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2020-01-27 12:27:53
veracode
veracode
Information Disclosure
2019-08-14 00:12:16
mscve
mscve
Windows Kernel Information Disclosure Vulnerability
2019-08-06 07:00:00
ubuntu
ubuntu
Linux kernel (AWS) vulnerability
2019-08-13 00:00:00
Linux kernel (Xenial HWE) vulnerabilities
2019-08-13 00:00:00
Linux kernel vulnerabilities
2019-08-13 00:00:00
huawei
huawei
amazon
amazon
Medium: kernel
2019-08-05 17:48:00
Medium: kernel
2019-08-05 17:40:00
threatpost
threatpost
New SWAPGS Side-Channel Attack Bypasses Spectre and Meltdown Defenses
2019-08-07 13:55:07
zdt
zdt
Windows Kernel - Information Disclosure Vulnerability
2020-02-15 00:00:00
redhatcve
redhatcve
CVE-2019-1125
2019-11-04 16:10:42
exploitdb
exploitdb
Microsoft Windows Kernel - Information Disclosure
2020-01-27 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2019-09-18 20:39:01
kernel, perf, python security update
2019-08-16 21:55:43
mageia
mageia
Updated kernel packages fix security vulnerabilities
2019-08-13 00:08:18
Updated kernel packages fix security vulnerabilities
2019-08-13 00:08:18
Updated kernel-linus packages fix security vulnerabilities
2019-11-20 00:16:53
prion
prion
Information disclosure
2019-09-03 18:15:00
f5
f5
K31085564 : Spectre SWAPGS gadget vulnerability CVE-2019-1125
2019-08-23 00:00:00
virtuozzo
virtuozzo
lenovo
lenovo
suse
suse
Security update for the Linux Kernel (important)
2019-08-16 00:00:00
Security update for the Linux Kernel (important)
2019-08-16 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-08-14 06:12:49
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0175
2019-09-10 00:00:00
Critical Photon OS Security Update - PHSA-2019-0175
2019-09-03 00:00:00
Critical Photon OS Security Update - PHSA-2019-0250
2019-09-03 00:00:00
debian
debian
[SECURITY] [DLA 1884-1] linux security update
2019-08-14 00:16:24
[SECURITY] [DSA 4495-1] linux security update
2019-08-10 21:15:57
[SECURITY] [DSA 4495-1] linux security update
2019-08-10 21:15:57
cloudfoundry
cloudfoundry
USN-4095-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2019-08-29 00:00:00
osv
osv
linux - security update
2019-08-13 00:00:00
linux - security update
2019-08-10 00:00:00
linux-4.9 - security update
2019-08-13 00:00:00
ibm
ibm
Security Bulletin: IBM Security QRadar Packet Capture is vulnerable to Using Components with Known Vulnerabilities
2020-10-28 17:16:55
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-ze
2020-07-24 21:16:35
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-ze
2020-07-24 21:16:35
fortinet
fortinet
Meltdown and Spectre class vulnerabilities
2019-08-26 00:00:00
mskb
mskb
July 9, 2019—KB4507464 (Security-only update)
2019-08-06 07:00:00
July 9, 2019—KB4507461 (Security-only update)
2019-08-06 07:00:00
July 9, 2019—KB4507456 (Security-only update)
2019-08-06 07:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
5.6
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
35.1%
Related for CVE-2019-1125