CVE-2019-0545

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Microsoft.NET Core2.1; 2.2
MicrosoftMicrosoft .NET Framework2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2; 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2; 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2; 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2; 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2; 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2; 3.5 on Windows 10 for 32-bit Systems; 3.5 on Windows 10 for x64-based Systems; 3.5 on Windows 10 Version 1607 for 32-bit Systems; 3.5 on Windows 10 Version 1607 for x64-based Systems; 3.5 on Windows 10 Version 1703 for 32-bit Systems; 3.5 on Windows 10 Version 1703 for x64-based Systems; 3.5 on Windows 10 Version 1709 for 32-bit Systems; 3.5 on Windows 10 Version 1709 for ARM64-based Systems; 3.5 on Windows 10 Version 1709 for x64-based Systems; 3.5 on Windows 10 Version 1803 for 32-bit Systems; 3.5 on Windows 10 Version 1803 for ARM64-based Systems; 3.5 on Windows 10 Version 1803 for x64-based Systems; 3.5 on Windows 10 Version 1809 for 32-bit Systems; 3.5 on Windows 10 Version 1809 for x64-based Systems

References

Timeline

Published
Jan 8, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-05467.8A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ construcCVE-2019-05479.8A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, akaCVE-2019-05487.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service VulnerabilitCVE-2019-05495.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationCVE-2019-05508.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2019-05518.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2019-05528.8An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects WindowsCVE-2019-05535.5An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows SubsystemCVE-2019-05545.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationCVE-2019-05557.8An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainCVE-2019-05565.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2019-05575.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
CVE-2019-0545: High severity, CVSS 7.5 | Vulnix