5.5

CVE-2019-1254

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

Data is provided by the National Vulnerability Database (NVD)
MicrosoftWindows 10 Version1607 HwPlatformx64
MicrosoftWindows 10 Version1703 HwPlatformx64
MicrosoftWindows 10 Version1709 HwPlatformx64
MicrosoftWindows 10 Version1803 HwPlatformx64
MicrosoftWindows 10 Version1809 HwPlatformx64
MicrosoftWindows 10 Version1903 HwPlatformx64
MicrosoftWindows Server 2016 Version1803
MicrosoftWindows Server 2016 Version1903
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.59% 0.682
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.