CVE-2019-1440

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1436.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-144007.8cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing (SEC-479).CVE-2019-144018.8cPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480).CVE-2019-144023.3cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp (SEC-481).CVE-2019-144034.3cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC-483).CVE-2019-144045.5cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484)CVE-2019-144058.8cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487).CVE-2019-144066.1cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493).CVE-2019-144072.7cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415).CVE-2019-144084.3cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460).CVE-2019-144095.5cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466).CVE-2019-14418.8A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k CVE-2019-144103.3Maketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI (SEC-472).