CVE-2019-1406

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-140607.8Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due toCVE-2019-140617.5Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Auto, SnapdrCVE-2019-140629.8Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon AutCVE-2019-140639.1Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, SnaCVE-2019-140657.8u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2019-140667.8Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking FeaturCVE-2019-140675.5Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. iCVE-2019-140687.8Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon ConsumerCVE-2019-14077.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiCVE-2019-140707.0Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, CVE-2019-140717.8Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secureCVE-2019-140727.0Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse b
CVE-2019-1406: High severity, CVSS 7.8 | Vulnix