VULNERABILITY INTELLIGENCE

CVE-2020-1358

CVSS score5.5 MEDIUM

EPSS probability1.28%

CISA KEVNot currently listed

Published2020-07-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Resource Policy Information Disclosure Vulnerability'.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory