VDB

CVE-2020-0607

CVE-2020-0607 PUBLISHED CVSS 5.5 MEDIUM

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.

EPSS 17.62% · 95.2th percentile

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
17.62%
95.2th percentile

Affected Products

VendorProductVersions
microsoftwindows_server_2012r2
MicrosoftWindows 10 Version 1903 for x64-based Systems*
microsoftwindows_8.1
microsoftwindows_7
microsoftwindows_server_2019
MicrosoftWindows*, *, *
microsoftwindows_server_2008r2, r2
MicrosoftWindows Server, version 1909 (Server Core installation)unspecified
microsoftwindows_101909, 1709, 1803
MicrosoftWindows Server2012 (Core installation), 2012 R2, 2012 R2 (Core installation)
MicrosoftWindows 10 Version 1909 for ARM64-based Systems*
microsoftwindows_server_20161903, 1909, 1803
MicrosoftWindows 10 Version 1903 for ARM64-based Systemsunspecified
MicrosoftWindows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftWindows 10 Version 1909 for 32-bit Systemsunspecified
MicrosoftWindows Server, version 1903 (Server Core installation)unspecified
MicrosoftWindows 10 Version 1909 for x64-based Systemsunspecified

Timeline

  • May 23, 2014 PoC Published
  • Jan 14, 2020 CVE Published
  • Jan 21, 2020 PoC Published
  • Jun 26, 2020 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 22, 2021 EPSS Score
  • Oct 25, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Jul 2, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›