CVE-2019-0776
Win32k Information Disclosure Vulnerability
CVE-2019-0776 is fixed in 21 products on 1 platform, first by KB4489882, released March 12, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
4.7
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0162
76th percentile
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to either log on locally to an affected system, or convince a locally authenticated user to execute a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Windows 10 Version 1607 for 32-bit Systems | 14393.2848 | KB4489882 | Mar 12, 2019 |
| Windows 10 Version 1607 for x64-based Systems | 14393.2848 | KB4489882 | Mar 12, 2019 |
| Windows 10 Version 1703 for 32-bit Systems | 15063.1689 | KB4489871 | Mar 12, 2019 |
| Windows 10 Version 1703 for x64-based Systems | 15063.1689 | KB4489871 | Mar 12, 2019 |
| Windows 10 Version 1709 for 32-bit Systems | 16299.1029 | KB4489886 | Mar 12, 2019 |
| Windows 10 Version 1709 for ARM64-based Systems | 16299.1029 | KB4489886 | Mar 12, 2019 |
| Windows 10 Version 1709 for x64-based Systems | 16299.1029 | KB4489886 | Mar 12, 2019 |
| Windows 10 Version 1803 for 32-bit Systems | 17134.648 | KB4489868 | Mar 12, 2019 |
| Windows 10 Version 1803 for ARM64-based Systems | 17134.648 | KB4489868 | Mar 12, 2019 |
| Windows 10 Version 1803 for x64-based Systems | 17134.648 | KB4489868 | Mar 12, 2019 |
| Windows 10 Version 1809 for 32-bit Systems | 17763.379 | KB4489899 | Mar 12, 2019 |
| Windows 10 Version 1809 for ARM64-based Systems | 17763.379 | KB4489899 | Mar 12, 2019 |
| Windows 10 Version 1809 for x64-based Systems | 17763.379 | KB4489899 | Mar 12, 2019 |
| Windows 10 for 32-bit Systems | 10240.18158 | KB4489872 | Mar 12, 2019 |
| Windows 10 for x64-based Systems | 10240.18158 | KB4489872 | Mar 12, 2019 |
| Windows Server 2016 | 14393.2848 | KB4489882 | Mar 12, 2019 |
| Windows Server 2016 (Server Core installation) | 14393.2848 | KB4489882 | Mar 12, 2019 |
| Windows Server 2019 | 17763.379 | KB4489899 | Mar 12, 2019 |
| Windows Server 2019 (Server Core installation) | 17763.379 | KB4489899 | Mar 12, 2019 |
| Windows Server, version 1709 (Server Core Installation) | 16299.1029 | KB4489886 | Mar 12, 2019 |
| Windows Server, version 1803 (Server Core Installation) | 17134.648 | KB4489868 | Mar 12, 2019 |