CVE-2019-1118

—

CVSS 3.0

8.8 high

EPSS

24%p98

Published

Jul 15, 2019 (Jul 15, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (23.6%)

In the news0 stories

No ingested article mentions this CVE yet.