CVE-2019-0628 | Vulnetix

CVE-2019-0628 PUBLISHED

Reported by microsoft · Published March 6, 2019

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

Affected products

Vendor	Product	Versions
Microsoft	Windows	7 for 32-bit Systems Service Pack 1, 7 for x64-based Systems Service Pack 1, 8.1 for 32-bit systems
Microsoft	Windows Server	2008 R2 for x64-based Systems Service Pack 1 (Core installation), 2008 R2 for Itanium-Based Systems Service Pack 1, 2008 R2 for x64-based Systems Service Pack 1
Microsoft	Windows	8.1, *
Microsoft	Windows Server	2016, 2019, 2012

Timeline

Feb 13, 2019 CVE Published
Feb 13, 2019 PoC Published
Apr 14, 2021 EPSS Score (30 in total, the first dated here)
Mar 30, 2026 Security Advisory (4 in total, the first dated here)
Jun 17, 2026 CVE Updated
Sep 17, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2019-0628
vulnetix vdb fixes CVE-2019-0628

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2019-0628/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

106893 vdb-entryx_refsource_BID
x_refsource_CONFIRM

Look up in the Resolve Platform →