CVE-2019-1039: microsoft windows_10 Improper Initialization

Vulnerability summary

CVE-2019-1039 is a medium (CVSS 5.5) Improper Initialization vulnerability in microsoft windows_10. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71.1% of scored vulnerabilities.

Timeline

1. 12-06-2019
   PublishedVulnerability first disclosed.
2. 20-05-2025
   Last modifiedVulnerability information updated.

Description

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.

• CWE-665Improper InitializationThe product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.