CVE-2019-1430

CVSS 3.1: 7.8 high
EPSS: 14%p96
Published: Nov 12, 2019 · Nov 12, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-1430 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.

Vendors: microsoft

Products: windows 10, windows server 2016

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (13.8%)

In the news

2 stories

Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosNov 12, 19:58 UTC · Nov 12, 2019VulnerabilityCVE-2019-1448 CVE-2019-0721 CVE-2019-1389+702 · 1 read

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Media Foundation

Cisco TalosNov 12, 19:07 UTC · Nov 12, 2019VulnerabilityExploitedCVE-2019-14302 · 1 read