VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 10, 2019· Updated Jun 17, 2026

CVE-2019-1337

CVE-2019-1337

Description

An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Disclosure Vulnerability'.

Affected products

11
  • Microsoft/Windows 10 19092 versions
    cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2016
    cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows Update Clientllm-fuzzy
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: 2019
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windowsv5
    Range: 10 Version 1809 for 32-bit Systems

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.