CVE-2019-1430

—

CVSS 3.1

7.8 high

EPSS

14%p96

Published

Nov 12, 2019 (Nov 12, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows 10, windows server 2016
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (13.8%)

In the news2 stories

Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosNov 12, 19:58 UTC · Nov 12, 2019Vulnerability CVE-2019-1448 CVE-2019-0721 CVE-2019-1389+70 CVEs

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Media Foundation

Cisco TalosNov 12, 19:07 UTC · Nov 12, 2019Vulnerability in the wildCVE-2019-14301