CVE-2019-1468

—1

CVSS 3.1

8.8 high

EPSS

17%p97

Published

Dec 10, 2019 (Dec 10, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (16.6%)

In the news2 stories

Patch Tuesday, December 2019 Edition

Krebs on SecurityDec 12, 12:01 UTC · Dec 12, 2019Vulnerability in the wildCVE-2019-1458 CVE-2019-0859 CVE-2019-1468+1 CVEs

Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosDec 10, 18:41 UTC · Dec 10, 2019Vulnerability CVE-2019-1468 CVE-2019-1471 CVE-2019-1458+22 CVEs