PT-2020-4382 · Microsoft · Windows Kernel+1
Jonas Lykkegård
·
Published
2020-10-13
·
Updated
2023-12-31
·
CVE-2020-16938
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Windows kernel (affected versions not specified)
Description:
An information disclosure issue exists due to the Windows kernel's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further compromise the system by running a specially crafted application on an affected system. The vulnerability does not allow an attacker to execute code or elevate user rights directly but can be used to obtain sensitive information.
Recommendations:
To resolve the issue, update the Windows kernel to the latest version that corrects how the kernel handles objects in memory.
As a temporary workaround, consider restricting access to sensitive information and physical drives to minimize the risk of exploitation.
Avoid using weak NTFS volume permissions until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Windows
Windows Kernel