Lucene search

[email protected]CVE-2019-1337

HistoryOct 10, 2019 - 2:15 p.m.

CVE-2019-1337

2019-10-1014:15:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2019-1337

windows update client

information disclosure

vulnerability

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.8%

JSON

An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka ‘Windows Update Client Information Disclosure Vulnerability’.

VendorProductVersionCPE
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_10_1903 for 32-bit systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for 32-bit systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for arm64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for arm64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_server,_version_1903unspecifiedcpe:2.3:o:microsoft:windows_server,_version_1903:unspecified:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows_server_2016	*	cpe:2.3:o:microsoft:windows_server_2016::::::::
microsoft	windows_server_2016	*	cpe:2.3:o:microsoft:windows_server_2016::::::::
microsoft	windows_10_1903 for 32-bit systems	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for 32-bit systems:unspecified:::::::*
microsoft	windows_10_1903 for x64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:unspecified:::::::*
microsoft	windows_10_1903 for arm64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for arm64-based systems:unspecified:::::::*
microsoft	windows_server,_version_1903	unspecified	cpe:2.3:o:microsoft:windows_server,_version_1903:unspecified:::::::*