CVE-2020-0937: Medium severity windows 10 vulnerability

Published Apr 15, 2020

Updated

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947.

Affected Software

12 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0937

Event History

Apr 15, 2020

CVE Published

via MITRE·03:12 PM

Data Sourced

via MITRE·03:12 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0937?

CVE-2020-0937 is rated as important due to its potential for information disclosure.

How do I fix CVE-2020-0937?

To fix CVE-2020-0937, apply the latest security updates provided by Microsoft for affected versions of Windows.

What versions of Windows are affected by CVE-2020-0937?

CVE-2020-0937 affects various versions of Microsoft Windows 10, Windows Server 2016, and Windows Server 2019.

What type of vulnerability is CVE-2020-0937?

CVE-2020-0937 is an information disclosure vulnerability related to Media Foundation's handling of objects in memory.

Can CVE-2020-0937 be exploited remotely?

CVE-2020-0937 cannot be exploited remotely as it requires user interaction to trigger the vulnerability.