CVE-2020-0941: Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to either log on locally to an affected system, or convince a locally authenticated user to execute a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
Other sources
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1250.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-0941?
CVE-2020-0941 is an information disclosure vulnerability in the win32k component of Microsoft Windows.
What is the severity of CVE-2020-0941?
CVE-2020-0941 has a severity rating of medium with a CVSS score of 5.5.
Which software versions are affected by CVE-2020-0941?
CVE-2020-0941 affects various versions of Microsoft Windows, including Windows 10, Windows 8.1, Windows RT 8.1, and Windows Server.
How does CVE-2020-0941 work?
CVE-2020-0941 allows an attacker to obtain sensitive information from the kernel incorrectly provided by the win32k component of Windows.
Is there a fix available for CVE-2020-0941?
Microsoft has released security updates to address the CVE-2020-0941 vulnerability. It is recommended to install the latest updates.