Win32k Graphics Remote Code Execution Vulnerability

🗓️ 10 Dec 2019 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 42 Views

Win32k Graphics Remote Code Execution Vulnerability. Windows font library improperly handles specially crafted embedded fonts allowing attacker control of affected system

Reporter	Title	Published	Views	Family All 51
BDU FSTEC	The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code	29 Jan 202000:00	–	bdu_fstec
Circl	CVE-2019-1468	9 Mar 202413:46	–	circl
CNVD	Microsoft Windows and Microsoft Windows Server Remote Code Execution Vulnerability (CNVD-2020-02189)	13 Dec 201900:00	–	cnvd
CVE	CVE-2019-1468	10 Dec 201921:41	–	cve
Cvelist	CVE-2019-1468	10 Dec 201921:41	–	cvelist
GoogleProjectZero	TFW you-get-really-excited-you-patch-diffed-a-0day-used-in-the-wild-but-then-find-out-it-is-the-wrong-vuln	2 Apr 202000:00	–	googleprojectzero
Microsoft KB	December 10, 2019—KB4530681 (OS Build 10240.18427)	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530684 (OS Builds 18362.535 and 18363.535) - EXPIRED	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530689 (OS Build 14393.3384)	10 Dec 201908:00	–	mskb
Microsoft KB	December 10, 2019—KB4530691 (Monthly Rollup)	10 Dec 201908:00	–	mskb

Vulners

Node

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

OR

microsoft windows_10_version_1909_for_arm64-based_systems

OR

microsoft windows_10_version_1909_for_32-bit_systems

OR

microsoft windows_server,_version_1909_(server_core_installation)

OR

microsoft windows_10_version_1909_for_x64-based_systems

10 Dec 2019 08:00Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

CVSS 29.3

CVSS 38.4

EPSS0.16568

win32k graphics remote code execution windows font library embedded fonts vulnerability attack scenario security update microsoft