CVE-2020-0945 — Sensitive Information Exposure in Microsoft Windows
Severity
5.5MEDIUMNVD
EPSS
27.5%
top 3.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 15
Latest updateMay 24
Description
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946, CVE-2020-0947.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6
Affected Packages10 packages
Patches
🔴Vulnerability Details
10GHSA▶
GHSA-g3fm-58rr-pjr5: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosur↗2022-05-24
GHSA▶
GHSA-mc5g-g767-pr48: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosur↗2022-05-24
GHSA▶
GHSA-jf35-5pgv-6674: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosur↗2022-05-24
GHSA▶
GHSA-jx37-4vpc-5jhm: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosur↗2022-05-24
GHSA▶
GHSA-gwjq-59ch-2j8v: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosur↗2022-05-24