CVE-2020-1141Medium· 5.5▾ SunlitAn information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclo…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.6%
1.6% → 1.9%
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how GDI handles memory addresses.
windows_10windows_10 = 1607windows_10 = 1709windows_10 = 1803windows_10 = 1809windows_10 = 1903windows_10 = 1909windows_7windows_8.1windows_rt_8.1windows_server_2008windows_server_2008 = r2windows_server_2012windows_server_2012 = r2windows_server_2016windows_server_2016 = 1803windows_server_2016 = 1903windows_server_2016 = 1909windows_server_2019Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-1166High· 7.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service
CVE-2020-1165High· 7.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service
CVE-2020-1164High· 7.0An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory
CVE-2020-1158High· 7.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory
CVE-2020-1157High· 7.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory
CVE-2020-1156High· 7.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory