CVE-2019-1227

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.

• CWE-200
• CWE-200

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1227Patch, Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1227Patch, Vendor Advisory

Published

Aug 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12262Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Ac…9.8
• CVE-2019-12263Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in th…8.1
• CVE-2019-12264Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has …7.1
• CVE-2019-12265Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a…5.3
• CVE-2019-12266Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2…9.8
• CVE-2019-12269Enigmail before 2.0.11 allows PGP signature spoofing: for an…
• CVE-2019-12270OpenText Brava! Enterprise and Brava! Server 7.5 through 16.…
• CVE-2019-12271Sandline Centraleyezer (On Premises) allows unrestricted Fil…9.8
• CVE-2019-12272In OpenWrt LuCI through 0.10, the endpoints admin/status/rea…
• CVE-2019-12273OutSystems Platform 10 through 11 allows ImageResourceDetail…6.5
• CVE-2019-12274In Rancher 1 and 2 through 2.2.3, unprivileged users (if all…
• CVE-2019-12276A Path Traversal vulnerability in Controllers/LetsEncryptCon…