CVE-2020-1145 — Sensitive Information Exposure in Microsoft Windows
Severity
6.5MEDIUMNVD
NVD5.5
EPSS
0.5%
top 32.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 21
Latest updateMay 24
Description
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0963, CVE-2020-1141, CVE-2020-1179.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6
Affected Packages18 packages
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-4jcj-9hpq-7w3m: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Inform↗2022-05-24
GHSA▶
GHSA-48rp-gmw7-r283: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an atta↗2022-05-24
GHSA▶
GHSA-7hhh-9v5f-7qv9: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an atta↗2022-05-24
GHSA▶
GHSA-wp86-6rgw-4rcx: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Inform↗2022-05-24