CVE-2019-0602

CVE-2019-0602 is an information disclosure vulnerability in the Windows GDI component, allowing it to improperly reveal memory contents. This medium-severity flaw (CVSS 6.5) affects multiple Windows versions, including Windows 7, 10, and various server editions. An attacker could exploit this remotely with low complexity, requiring user interaction, to achieve high confidentiality impact by disclosing sensitive information. While no public exploit code or active exploitation is reported, it has received some community and media attention, with a patch released in February 2019.