CVE-2020-0622 - An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'

Back Back to CVE browser

MEDIUM

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'

Published Jan 14, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 1.30%

Description

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.

Affected products

Vendor Microsoft Product Windows Default
n/a
- Version
  10 Version 1607 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1607 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 for x64-based Systems
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server Default
n/a
- Version
  2016
  Status
  affected
  Constraints
  -
- Version
  2016 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  version 1803 (Core Installation)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows

n/a

Version	Status	Constraints
10 Version 1607 for 32-bit Systems	affected	-
10 Version 1607 for x64-based Systems	affected	-
10 Version 1709 for 32-bit Systems	affected	-
10 Version 1709 for ARM64-based Systems	affected	-
10 Version 1709 for x64-based Systems	affected	-
10 Version 1803 for 32-bit Systems	affected	-
10 Version 1803 for ARM64-based Systems	affected	-
10 Version 1803 for x64-based Systems	affected	-
10 for 32-bit Systems	affected	-
10 for x64-based Systems	affected	-

Microsoft

Windows Server

n/a

Version	Status	Constraints
2016	affected	-
2016 (Core installation)	affected	-
version 1803 (Core Installation)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2116
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0622
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2116		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0622		x_refsource_MISCPatchVendor Advisory