Description
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1389, CVE-2020-1426.
Scores
CVSS v3
5.5
EPSS
0.0064
EPSS Percentile
70.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-909
Status
published
Products (19)
microsoft/windows_10
(2 CPE variants)
microsoft/windows_10
1607 (2 CPE variants)
microsoft/windows_10
1709 (3 CPE variants)
microsoft/windows_10
1803 (3 CPE variants)
microsoft/windows_10
1809 (3 CPE variants)
microsoft/windows_10
1903 (3 CPE variants)
microsoft/windows_10
1909 (3 CPE variants)
microsoft/windows_10
2004 (3 CPE variants)
microsoft/windows_7
(2 CPE variants)
microsoft/windows_8.1
(2 CPE variants)
... and 9 more
Published
Jul 14, 2020
Tracked Since
Feb 18, 2026