CVE-2019-0840

MEDIUM

Windows 10 and Windows Server 2016/2019 - Kernel Information Disclosure

Title source: llm
STIX 2.1

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0844.

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0213
EPSS Percentile 80.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (6)
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_server_2016 1709
microsoft/windows_server_2016 1803
microsoft/windows_server_2019
Published Apr 09, 2019
Tracked Since Feb 18, 2026