{"id":"CVE-2019-1480","aliases":["EUVD-2019-10037","GHSA-36c4-mfgf-7fg3"],"status":"published","title":"An information disclosure vulnerability exists in Windows Media Player when it fails to properly...","description":"An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1481.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05969,"percentile":0.93346,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2019-12-10T21:41:04Z","modified":"2026-06-17T02:28:41Z","products":[{"vendor":"microsoft","product":"windows"},{"vendor":"microsoft","product":"windows_7"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1480","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-19-1002/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1480"},{"url":"https://github.com/advisories/GHSA-36c4-mfgf-7fg3"}],"sources":{"cve":[{"id":"CVE-2019-1480","description":"An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1481.","status":"published","published":"2019-12-10T21:41:04Z","modified":"2024-08-04T18:20:27.527Z","updated_at":"2026-11-02T14:20:26.034547Z"}],"euvd":[{"id":"EUVD-2019-10037","description":"An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1481.","status":"published","published":"2019-12-10T21:41:04Z","modified":"2024-08-04T18:20:27Z","updated_at":"2026-11-03T03:06:57.636947Z"}],"ghsa":[{"id":"GHSA-36c4-mfgf-7fg3","title":"An information disclosure vulnerability exists in Windows Media Player when it fails to properly...","description":"An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1481.","status":"published","published":"2022-05-24T17:03:08Z","modified":"2023-01-29T05:00:38Z","updated_at":"2026-11-02T14:44:37.925447Z"}],"nvd":[{"id":"CVE-2019-1480","description":"An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Media Player Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1481.","status":"published","published":"2019-12-10T22:15:17.79Z","modified":"2026-06-17T02:28:41.263Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:40.258829Z"}]}}