Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19991 State: PUBLISHED Published: 2020-02-26T15:10:29 Last Updated: 2024-08-05T02:32:10.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /vam/vam_anagraphic.php, /vam/vam_vamuser.php, /common/vamp_main.php, and /wiz/change_password.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/prod
w.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19992 State: PUBLISHED Published: 2020-02-26T15:09:02 Last Updated: 2024-08-05T02:32:10.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /common/vam_editXml.php doesn't check the parameter that identifies the file name to be read. Thus, an attacker can manipulate the file name to access a potentially sensitive file within the filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-te
lyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19993 State: PUBLISHED Published: 2020-02-26T15:06:36 Last Updated: 2024-08-05T02:32:10.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send arbitrary content to the vulnerable pages to generate error messages that expose some full paths. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19994 State: PUBLISHED Published: 2020-02-26T15:03:43 Last Updated: 2024-08-05T02:32:10.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentication is able to execute arbitrary operating system command by injecting the vulnerable parameter in the PHP Web page /common/vam_monitor_sap.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19995 State: PUBLISHED Published: 2019-12-26T17:31:26 Last Updated: 2024-08-05T02:32:10.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40rsantos_14778/csrf-cve-2019-19995-96c1a2dcc182
CVE ID: CVE-2019-19996 State: PUBLISHED Published: 2019-12-26T17:34:12 Last Updated: 2024-08-05T02:32:10.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40rsantos_14778/dos-cve-2019-19996-5ad1be772179
CVE ID: CVE-2019-19998 State: PUBLISHED Published: 2019-12-26T03:37:44 Last Updated: 2024-08-05T02:32:10.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/xiuno/xiunobbs/issues/I177MY
CVE ID: CVE-2019-19999 State: PUBLISHED Published: 2019-12-26T03:38:03 Last Updated: 2024-08-05T02:32:10.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/419 - https://github.com/halo-dev/halo/issues/440 - https://github.com/halo-dev/halo/compare/v1.1.3-beta.2...v1.2.0-beta.1
CVE ID: CVE-2019-1000 State: PUBLISHED Published: 2019-05-16T18:24:57 Last Updated: 2024-08-04T18:06:31.221Z Vendors: Microsoft Products: Microsoft Azure Active Directory Connect Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the AzureÃ‚Â AD Connect server, aka 'Microsoft Azure AD Connect Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://po
nnect Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1000
CVE ID: CVE-2019-1001 State: PUBLISHED Published: 2019-07-15T18:56:20 Last Updated: 2024-08-04T18:06:31.464Z Vendors: Microsoft Products: Internet Explorer 11, Internet Explorer 11 on Windows Server 2012, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Microsoft Edge, Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems, Microsoft Edge on Windows 10 Version 1903 for x64-based Systems, Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems, ChakraCore Problem Types: Remote Code Execution Description: A remote cod
ndows 10 Version 1903 for ARM64-based Systems, ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1004, CVE-2019-1056, CVE-2019-1059. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1001
CVE ID: CVE-2019-1002 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:50:04.047Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (EdgeHTML-based) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. I
nce a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability. The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1002
CVE ID: CVE-2019-1003 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:50:04.611Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (EdgeHTML-based), ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the cur
d then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability. The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1003
CVE ID: CVE-2019-1004 State: PUBLISHED Published: 2019-07-15T18:56:20 Last Updated: 2024-08-04T18:06:31.340Z Vendors: Microsoft Products: Internet Explorer 9, Internet Explorer 11, Internet Explorer 11 on Windows Server 2012, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 10 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This
ing engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1056, CVE-2019-1059. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1004
CVE ID: CVE-2019-1005 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:50:05.243Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O) Vendors: Microsoft Products: Internet Explorer 10, Internet Explorer 9, Internet Explorer 11 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current use
urrent user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an app
o view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability. The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1005
CVE ID: CVE-2019-1006 State: PUBLISHED Published: 2019-07-15T18:56:20 Last Updated: 2024-08-04T18:06:31.475Z Vendors: Microsoft Products: Windows, Windows Server, Microsoft SharePoint Foundation, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft SharePoint Enterprise Server, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft SharePoint Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1,
r, version 1903 (Server Core installation), Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems, Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems, Microsoft .NET Framewo
indows 8.1 for 32-bit systems, Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems, Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows RT 8.1, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation), Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version
ft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x
4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Versio
3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation), Microsoft.IdentityModel, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.0, Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.5.1 Problem Types: Elevation of Privilege Description: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/W
n (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1006
CVE ID: CVE-2019-1007 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:50:05.883Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based System
016 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with
bility by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running. The update addresses the vulnerability by correcting how the Windows Audio Service handles processes these requests. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1007
CVE ID: CVE-2019-1008 State: PUBLISHED Published: 2019-05-16T18:24:57 Last Updated: 2024-08-04T18:06:31.579Z Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises), Microsoft Dynamics CRM 2015 (on-premises) Problem Types: Security Feature Bypass Description: A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1008
CVE ID: CVE-2019-1009 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:49:39.365Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 7, Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Systems Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses th
dditional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1009
CVE ID: CVE-2019-1010 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:49:40.061Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2,
03 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows
cing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1010
CVE ID: CVE-2019-1011 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:49:40.787Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 7, Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Systems Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses th
dditional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1011
CVE ID: CVE-2019-1012 State: PUBLISHED Published: 2019-06-12T13:49:39 Last Updated: 2025-05-20T17:49:41.425Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1703, Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows
er 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows