What is the CVSS score of CVE-2019-1314?

CVE-2019-1314 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.9%.

Is there a patch available for CVE-2019-1314?

Yes, a patch is available for CVE-2019-1314. Update the affected software to the latest version immediately.

Windows 10 Mobile CVE-2019-1314

MEDIUM

2019-10-10 secure@microsoft.com

Authentication Bypass Microsoft Windows 10 Mobile

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Oct 10, 2019 - 14:15 nvd

MEDIUM 6.8

DescriptionNVD

AnalysisAI

A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen, aka 'Windows 10 Mobile Security Feature Bypass. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Technical ContextAI

A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen, aka 'Windows 10 Mobile Security Feature Bypass Vulnerability'. Affected products include: Microsoft Windows 10 Mobile.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.