CVE-2019-1489: Microsoft Windows XP

High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle objects in memory, aka 'Remote Desktop Protocol Information Disclosure Vulnerability'.

Affected products

• Microsoft Windows XP: affected versions not specified

Published 2019-12-10. Last modified 2026-06-17.