VDB
CVE-2020-0615
CVE-2020-0615
PUBLISHED
Reported by microsoft · Published January 14, 2020
An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows | 10 Version 1803 for 32-bit Systems, 10 Version 1803 for x64-based Systems, 10 Version 1803 for ARM64-based Systems |
| Microsoft | Windows Server | version 1803 (Core Installation), 2019, 2019 (Core installation) |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | unspecified |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | unspecified |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | unspecified |
| Microsoft | Windows Server, version 1903 (Server Core installation) | unspecified |
| Microsoft | Windows 10 Version 1909 for 32-bit Systems | unspecified |
| Microsoft | Windows 10 Version 1909 for x64-based Systems | unspecified |
| Microsoft | Windows 10 Version 1909 for ARM64-based Systems | unspecified |
| Microsoft | Windows Server, version 1909 (Server Core installation) | unspecified |
| Microsoft | Windows 10 Version 1909 for ARM64-based Systems | * |
| Microsoft | Windows 10 Version 1909 for 32-bit Systems | * |
| Microsoft | Windows 10 Version 1909 for x64-based Systems | * |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | * |
| Microsoft | Windows | *, 8.1 |
| Microsoft | Windows Server, version 1903 (Server Core installation) | * |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | * |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | * |
| Microsoft | Windows Server | 2016, *, 2019 |
| Microsoft | Windows Server, version 1909 (Server Core installation) | * |
Timeline
- Jan 14, 2020 CVE Published
- Jan 21, 2020 PoC Published (2 in total, the first dated here)
- Apr 14, 2021 EPSS Score (30 in total, the first dated here)
- Nov 21, 2024 CVE Updated
- Mar 30, 2026 Security Advisory (3 in total, the first dated here)
- Sep 7, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2020-0615
vulnetix vdb fixes CVE-2020-0615Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2020-0615/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart