{
  "cveId": "CVE-2019-1430",
  "url": "https://patchblox.com/security/cve/CVE-2019-1430",
  "summary": "CVE-2019-1430 is fixed in 4 products on 1 platform, first by KB4524570, released November 12, 2019. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability",
  "description": "\u003Cp\u003EA remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.\u003C/p\u003E\n\u003Cp\u003EAn attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an attacker must send a specially crafted QuickTime file to a user and convince them to open it. When opened, the malicious QuickTime file will execute code of the attacker\u2019s choice on the target system.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by ensuring Windows Media Foundation properly parses QuickTime media files.\u003C/p\u003E",
  "published": "2019-11-12T08:00:00Z",
  "severity": "Critical",
  "cvss": 7.3,
  "epss": 0.13843,
  "epssPercentile": 0.96549,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1430",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1903 for 32-bit Systems",
      "fixedVersion": "",
      "fix": "KB4524570",
      "url": "https://patchblox.com/security/fix/microsoft/kb4524570",
      "released": "2019-11-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1903 for ARM64-based Systems",
      "fixedVersion": "",
      "fix": "KB4524570",
      "url": "https://patchblox.com/security/fix/microsoft/kb4524570",
      "released": "2019-11-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1903 for x64-based Systems",
      "fixedVersion": "",
      "fix": "KB4524570",
      "url": "https://patchblox.com/security/fix/microsoft/kb4524570",
      "released": "2019-11-12T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server, version 1903 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4524570",
      "url": "https://patchblox.com/security/fix/microsoft/kb4524570",
      "released": "2019-11-12T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}