CVE-2019-1430

CVE-2019-1430 is a remote code execution vulnerability in Microsoft Windows Media Foundation, affecting Windows 10 and Windows Server 2016. It arises from improper parsing of specially crafted QuickTime media files, allowing an attacker to gain the same user rights as the local user. With a CVSS score of 7.8 (High), it requires user interaction (UI:R) but has low attack complexity (AC:L) and can lead to high impact on confidentiality, integrity, and availability. While it has a high FAUCET Risk Score of 95/100 and an elevated EPSS score, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and limited community discussion or media coverage beyond initial patch reporting.