CVE-2019-1430

high · 7.8

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.

7.8

CVSS

13.8%

EPSS (exploit prob.)

96th

EPSS percentile

2019-11-12

Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	windows_10	1903
microsoft	windows_server_2016	1903

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1430
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1430

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-1430