[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2019-1125Date: (C)2019-08-09   (M)2024-04-19


An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 5.5CVSS Score : 2.1
Exploit Score: 1.8Exploit Score: 3.9
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: LOCALAccess Vector: LOCAL
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: LOWAuthentication: NONE
User Interaction: NONEConfidentiality: PARTIAL
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: HIGHAvailability: NONE
Integrity: NONE 
Availability: NONE 
  
Reference:
RHBA-2019:2824
RHBA-2019:3248
RHSA-2019:2600
RHSA-2019:2609
RHSA-2019:2695
RHSA-2019:2696
RHSA-2019:2730
RHSA-2019:2899
RHSA-2019:2900
RHSA-2019:2975
RHSA-2019:3011
RHSA-2019:3220
http://packetstormsecurity.com/files/156337/SWAPGS-Attack-Proof-Of-Concept.html
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-swapgs-en
https://kc.mcafee.com/corporate/index?page=content&id=SB10297
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1125
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1125
https://www.synology.com/security/advisory/Synology_SA_19_32

CPE    13
cpe:/o:microsoft:windows_10:1809
cpe:/o:microsoft:windows_10:1803
cpe:/o:microsoft:windows_10:1607
cpe:/o:microsoft:windows_server_2008:-:sp2
...
CWE    1
CWE-200
OVAL    57
oval:org.secpod.oval:def:604512
oval:org.secpod.oval:def:116945
oval:org.secpod.oval:def:69738
oval:org.secpod.oval:def:604500
...

© SecPod Technologies