CVE-2019-1254HighCVSS 5.5

Windows Hyper-V Information Disclosure Vulnerability

Published
September 10, 2019
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2019-1254 →

📋 Description

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk. An attacker could exploit the vulnerability by reading a file to recover kernel memory. To exploit the vulnerability, an attacker would first require access to a Hyper-V host. The security update addresses the vulnerability by ensuring Hyper-V properly initializes memory before writing it to disk.

🎯 Affected products12

  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1703 for x64-based Systems
  • Windows 10 Version 1709 for x64-based Systems
  • Windows 10 Version 1803 for x64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1903 for x64-based Systems
  • Windows Server 2016
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server, version 1803 (Server Core Installation)
  • Windows Server, version 1903 (Server Core installation)

✅ Remediation

KB4516068 (Security Update) KB4516058 (Security Update) KB4512578 (Security Update) KB4516066 (Security Update) KB4515384 (Security Update) KB4516044 (Security Update)

🔗 References (14)