High severity7.5NVD Advisory· Published Dec 10, 2019· Updated Jun 17, 2026

CVE-2019-1489

Description

An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle objects in memory, aka 'Remote Desktop Protocol Information Disclosure Vulnerability'.

Affected products

Microsoft/Windows Xp
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
Microsoft/Remote Desktop Protocolllm-fuzzy
Microsoft/Microsoft Windows XP Service Pack 3v5
Range: unspecified

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1489nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000