CVE-2019-1466

CVE-2019-1466 is an information disclosure vulnerability in the Windows GDI component that affects multiple versions of Microsoft Windows and Windows Server. This flaw allows the GDI to improperly disclose memory contents, potentially leading to sensitive data exposure. With a CVSS score of 6.5 (Medium), it has a network attack vector and low attack complexity, requiring user interaction to exploit, and can result in high confidentiality impact. While the EPSS score and community discussion indicate some attention, there is no evidence of active exploitation, nor are public exploit modules or proof-of-concept code readily available.