ID:5753 - Exploit for Out-of-bounds read in Windows and Windows Server - CVE-2019-1337

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to Windows Update Client fails to properly handle objects in memory. A local authenticated user can use a specially crafted application to trigger out-of-bounds read error and read contents of an elevated process.

Remediation