CVE-2020-1391

MEDIUM

Windows 10 and Windows Server 2016 - Information Disclosure in Agent Activation Runtime

Title source: llm

Description

An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in memory, aka 'Windows Agent Activation Runtime Information Disclosure Vulnerability'.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1391

Scores

CVSS v3 5.5

EPSS 0.0122

EPSS Percentile 65.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (6)

microsoft/windows_10 1903

microsoft/windows_10 1909

microsoft/windows_10 2004

microsoft/windows_server_2016 1903

microsoft/windows_server_2016 1909

microsoft/windows_server_2016 2004

Published Jul 14, 2020

Tracked Since Feb 18, 2026