CVE-2019-1025

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application or to convince a user to open a specific file on a network share. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding. The update addresses the vulnerability by correcting how Windows handles objects in memory.

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1025
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1025Patch, Vendor Advisory

Published

Jun 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10244In Eclipse Kura versions up to 4.0.0, the Web UI package and…
• CVE-2019-10245In Eclipse OpenJ9 prior to the 0.14.0 release, the Java byte…7.5
• CVE-2019-10246In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the ser…5.3
• CVE-2019-10247In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 …5.3
• CVE-2019-10248Eclipse Vorto versions prior to 0.11 resolved Maven build ar…
• CVE-2019-10249All Xtext & Xtend versions prior to 2.18.0 were built using …8.1
• CVE-2019-10250UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downl…
• CVE-2019-10251The UCWeb UC Browser application through 2019-03-26 for Andr…
• CVE-2019-10253A Cross-Site Request Forgery (CSRF) vulnerability exists in …6.5
• CVE-2019-10254In MISP before 2.4.105, the app/View/Layouts/default.ctp def…
• CVE-2019-10255An Open Redirect vulnerability for all browsers in Jupyter N…
• CVE-2019-10256An authentication bypass vulnerability in VIVOTEK IPCam vers…9.8