VULNERABILITY INTELLIGENCE
CVE-2020-0861
CVSS score7.8 HIGH
EPSS probability1.03%
CISA KEVNot currently listed
Published2020-03-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability'.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory