Microsoft Windows Kernel信息泄露漏洞

CNVD-ID CNVD-2019-07974 公开日期 2019-03-12 危害级别 低 (AV:L/AC:L/Au:N/C:P/I:N/A:N) 影响产品 Microsoft Windows Server 2008 R2 Itanium SP1
Microsoft Windows Server 2008 R2 for x64-based Systems SP1 0
Microsoft Windows 7 for x64-based Systems SP1
Microsoft Windows 7 for 32-bit Systems SP1
Microsoft Windows RT 8.1
Microsoft Windows 8.1 for x64-based Systems 0
Microsoft Windows 8.1 for 32-bit Systems 0
Microsoft Windows 10 for x64-based Systems 0
Microsoft Windows 10 for 32-bit Systems 0
Microsoft Windows 10 Version 1607 for x64-based Systems 0
Microsoft Windows 10 Version 1607 for 32-bit Systems 0
Microsoft Windows 10 Version 1607 for 32-bit Systems
Microsoft Windows 10 Version 1607 for x64-based Systems
Microsoft Windows 10 Version 1703 for 32-bit Systems
Microsoft Windows 10 Version 1703 for x64-based Systems
Microsoft Windows 8.1 for 32-bit systems
Microsoft Windows 8.1 for x64-based systems
Microsoft Windows 10
Microsoft Windows Server 2019 无
Microsoft Windows 10 Version 1809 for x64-based Systems
Microsoft Windows 10 Version 1809 for ARM64-based Systems
Microsoft Windows 10 Version 1809 for 32-bit Systems
Microsoft Windows 10 Version 1803 for x64-based Systems
Microsoft Windows 10 Version 1803 for ARM64-based Systems
BUGTRAQ ID 107194
CVE ID CVE-2019-0755
漏洞描述 Windows是美国微软公司研发的一套操作系统，Windows采用了图形化模式GUI。Windows Subsystem for Linux（简称WSL）是一个为在Windows 10和Windows Server 2019上能够原生运行Linux二进制可执行文件（ELF格式）的兼容层。

Microsoft Windows Kernel存在信息泄露漏洞。该漏洞源于Windows内核未能正确处理内存中的对象。攻击者可利用漏洞获取敏感信息，进而进一步危害用户的系统。
漏洞类型 通用型漏洞 参考链接 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0755
漏洞解决方案 厂商已发布漏洞修复程序，请及时关注更新：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0755
厂商补丁 Microsoft Windows Kernel信息泄露漏洞的补丁 验证信息 (暂无验证信息) 报送时间 2019-03-14 收录时间 2019-03-23 更新时间 2019-03-23 漏洞附件 (无附件)