Information disclosure in Windows and Windows Server - CVE-2019-0635
Published: February 12, 2019
Vulnerability identifier: #VU17589
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2019-0635
CWE-ID: CWE-200
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vendor: Microsoft
Affected software:
Windows
Windows Server
Windows
Windows Server
Detailed vulnerability description
The vulnerability allows an adjacent authenticated attacker to gain access to potentially sensitive information.
The vulnerability exists due to improper validation of user-supplied input. An adjacent attacker can run a specially crafted application that could cause the Hyper-V host operating system to disclose memory information.
How to mitigate CVE-2019-0635
Install updates from vendor's website.