CVE-2019-1093

CVE-2019-1093 is an information disclosure vulnerability in Microsoft DirectWrite that allows for improper disclosure of memory contents, affecting various versions of Windows and Windows Server. With a CVSS score of 5.5 (Medium), this vulnerability can lead to high confidentiality impact from a local attack with low privileges and complexity. While there is no known active exploitation, public exploit code, or Metasploit modules, the vulnerability has garnered some community discussion and media coverage.