description: A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
problem types: Remote Code Execution
affected:
{
product: Windows
vendor: Microsoft
versions:
status: affected, version: 10 Version 1709 for 32-bit Systems
status: affected, version: 10 Version 1709 for x64-based Systems
status: affected, version: 10 Version 1803 for 32-bit Systems
status: affected, version: 10 Version 1803 for x64-based Systems
status: affected, version: 10 Version 1803 for ARM64-based Systems
status: affected, version: 10 Version 1809 for 32-bit Systems
status: affected, version: 10 Version 1809 for x64-based Systems
status: affected, version: 10 Version 1809 for ARM64-based Systems
status: affected, version: 10 Version 1709 for ARM64-based Systems
}
{
product: Windows Server
vendor: Microsoft
versions:
status: affected, version: version 1803  (Core Installation)
status: affected, version: 2019
status: affected, version: 2019  (Core installation)
}
{
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: unspecified
}
