A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application or to convince a user to open a specific file on a network share. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding.
The update addresses the vulnerability by correcting how Windows handles objects in memory.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application or to convince a user to open a specific file on a network share. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding.
The update addresses the vulnerability by correcting how Windows handles objects in memory.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 1703 | affected |
|
||||||
| Microsoft | Windows 10 Version 1803 | affected |
|
||||||
| Microsoft | Windows Server, version 1803 (Server Core Installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1809 | affected |
|
||||||
| Microsoft | Windows 10 Version 1809 | affected |
|
||||||
| Microsoft | Windows Server 2019 | affected |
|
||||||
| Microsoft | Windows Server 2019 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1709 for 32-bit Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1709 | affected |
|
||||||
| Microsoft | Windows 10 Version 1507 | affected |
|
||||||
| Microsoft | Windows 10 Version 1607 | affected |
|
||||||
| Microsoft | Windows Server 2016 | affected |
|
||||||
| Microsoft | Windows Server 2016 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 7 | affected |
|
||||||
| Microsoft | Windows 7 Service Pack 1 | affected |
|
||||||
| Microsoft | Windows 8.1 | affected |
|
||||||
| Microsoft | Windows Server 2008 Service Pack 2 | affected |
|
||||||
| Microsoft | Windows Server 2008 Service Pack 2 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows Server 2008 Service Pack 2 | affected |
|
||||||
| Microsoft | Windows Server 2008 Service Pack 2 | affected |
|
||||||
| Microsoft | Windows Server 2008 R2 Systems Service Pack 1 | affected |
|
||||||
| Microsoft | Windows Server 2008 R2 Service Pack 1 | affected |
|
||||||
| Microsoft | Windows Server 2008 R2 Service Pack 1 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows Server 2012 | affected |
|
||||||
| Microsoft | Windows Server 2012 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows Server 2012 R2 | affected |
|
||||||
| Microsoft | Windows Server 2012 R2 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for x64-based Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | affected |
|
||||||
| Microsoft | Windows Server, version 1903 (Server Core installation) | affected |
|
Configuration 1 [-]
|
No data.
No data.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Microsoft
Subscribe
|
Windows 10
Subscribe
Windows 10 1507
Subscribe
Windows 10 1607
Subscribe
Windows 10 1809
Subscribe
Windows 7
Subscribe
Windows 8.1
Subscribe
Windows Rt 8.1
Subscribe
Windows Server 1803
Subscribe
Windows Server 1903
Subscribe
Windows Server 2008
Subscribe
Windows Server 2008 R2
Subscribe
Windows Server 2008 Sp2
Subscribe
Windows Server 2012
Subscribe
Windows Server 2012 R2
Subscribe
Windows Server 2016
Subscribe
Windows Server 2019
Subscribe
|
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 20 Feb 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft windows 10 1507
Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows Server 1803 Microsoft windows Server 1903 Microsoft windows Server 2008 R2 Microsoft windows Server 2008 Sp2 Microsoft windows Server 2012 R2 |
|
| CPEs | cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_server_1803:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:itanium:* cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:itanium:* cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft windows 10 1507
Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows Server 1803 Microsoft windows Server 1903 Microsoft windows Server 2008 R2 Microsoft windows Server 2008 Sp2 Microsoft windows Server 2012 R2 |
Tue, 20 May 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. | A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application or to convince a user to open a specific file on a network share. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding. The update addresses the vulnerability by correcting how Windows handles objects in memory. |
| Title | Windows Denial of Service Vulnerability | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2025-05-20T17:50:09.519Z
Reserved: 2018-11-26T00:00:00.000Z
Link: CVE-2019-1025
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-06-12T14:29:03.273
Modified: 2025-05-20T18:15:37.717
Link: CVE-2019-1025
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses