vulnerability

Microsoft Windows: CVE-2019-1251: DirectWrite Information Disclosure Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:N/A:N)

Published

Sep 10, 2019

Added

Sep 10, 2019

Modified

Sep 5, 2025

Description

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1245.

Solutions

microsoft-windows-windows_10-1703-kb4516068microsoft-windows-windows_10-1709-kb4516066microsoft-windows-windows_10-1803-kb4516058microsoft-windows-windows_10-1809-kb4512578microsoft-windows-windows_10-1903-kb4515384microsoft-windows-windows_server_2019-1809-kb4512578msft-kb4515384-1fec8c01-d96f-4692-9c3f-533f1966ba0f

References

CVE-2019-1251
https://attackerkb.com/topics/CVE-2019-1251
CWE-200
https://support.microsoft.com/help/4512578
https://support.microsoft.com/help/4515384
https://support.microsoft.com/help/4516058
https://support.microsoft.com/help/4516066
https://support.microsoft.com/help/4516068

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report