CVE-2019-1346

CVE-2019-1346 is a denial of service vulnerability affecting multiple versions of Microsoft Windows, including Windows 7, 8.1, 10, and various Windows Server editions. This vulnerability arises from improper handling of objects in memory, specifically an out-of-bounds read in the kernel when parsing malformed PE files. With a CVSS score of 6.5 (Medium), it can be exploited remotely with low attack complexity, requiring user interaction, leading to a high impact on availability. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-47488) exists, and it received limited community discussion and media coverage at the time of its disclosure.