VDB
CVE-2019-1441
CVE-2019-1441
PUBLISHED
In verschiedenen Microsoft Windows Betriebssystemen existiert eine Schwachstelle. Sie befindet sich in der Windows-Schriftartenbibliothek und beruht auf einem Fehler bei der Verarbeitung eingebetteter Schriftarten. Ein entfernter anonymer Angreifer kann dieses nutzen und Code mit administrativen Privilegien zur Ausführung bringen. Zur erfolgreichen Ausnutzung dieser Schwachstelle ist eine Benutzeraktion erforderlich.
EPSS 20.62% · 95.7th percentile
Risk Scores
EPSS Score
20.62%
95.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Windows Server 2016 | |
| Microsoft | Microsoft Windows RT 8.1 | |
| Microsoft | Microsoft Windows Server 2012 | |
| Microsoft | Microsoft Windows 8.1 | |
| Microsoft | Microsoft Windows Server 2008 SP2 | |
| Microsoft | Microsoft Windows Server 2008 R2 SP1 | |
| Microsoft | Microsoft Windows Server 2019 | |
| Microsoft | Microsoft Windows 7 | |
| Microsoft | Microsoft Windows Azure Stack | |
| Microsoft | Microsoft Windows Server | |
| Microsoft | Microsoft Windows Server 2012 R2 | |
| Microsoft | Microsoft Windows 10 |
Exploit Intelligence
- https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog (certbund)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
…and 9 more exploits
Timeline
- Nov 12, 2019 CVE Published
- Jan 10, 2021 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 22, 2021 PoC Published
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2023-0884.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0884 advisory
- https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog exploit
- https://portal.msrc.microsoft.com/de-de/security-guidance advisory
- http://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2019/11.html advisory