CVE-2019-1489

—

CVSS 3.1

7.5 high

EPSS

8%p94

Published

Dec 10, 2019 (Dec 10, 2019)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle objects in memory, aka 'Remote Desktop Protocol Information Disclosure Vulnerability'.

Vendors: microsoft
Products: windows xp
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.7%)

In the news2 stories

Patch Tuesday, December 2019 Edition

Krebs on SecurityDec 12, 12:01 UTC · Dec 12, 2019Vulnerability in the wildCVE-2019-1458 CVE-2019-0859 CVE-2019-1468+1 CVEs

Vulnerability Spotlight: Two vulnerabilities in RDP for Windows 7, XP

Cisco TalosDec 10, 19:46 UTC · Dec 10, 2019Vulnerability in the wildCVE-2019-1453 CVE-2019-1489