CVE-2019-1050

CVE-2019-1050 is an information disclosure vulnerability in the Windows GDI component affecting Windows 8.1, 10, and various Windows Server versions. It allows an attacker to obtain sensitive memory contents, potentially aiding further system compromise. The vulnerability has a CVSS score of 4.7 (Medium) due to its low attack complexity but requires user interaction, such as opening a malicious document or visiting an untrusted webpage. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has received some community discussion and media coverage. Microsoft addressed this flaw by correcting how the GDI component handles memory objects.