CVE-2019-1094

CVE-2019-1094 is an information disclosure vulnerability within the Windows GDI component, affecting various versions of Microsoft Windows and Windows Server. This flaw allows for the improper disclosure of memory contents. With a CVSS score of 6.5 (Medium), it can be exploited remotely with low attack complexity, requiring user interaction to achieve high confidentiality impact. While there is no evidence of active exploitation, no public exploit code, and it is not on the KEV catalog, it has received some community discussion and media coverage.