CVE-2020-1091: Windows Graphics Component Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
Other sources
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1097.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1091?
CVE-2020-1091 is rated as important, indicating that it requires attention but is not considered critical.
How do I fix CVE-2020-1091?
You can fix CVE-2020-1091 by applying the security updates provided by Microsoft for affected Windows versions.
Which versions of Windows are affected by CVE-2020-1091?
CVE-2020-1091 affects multiple versions including Windows 7, Windows 8.1, Windows 10, and several versions of Windows Server.
What kind of attacks can CVE-2020-1091 enable?
CVE-2020-1091 can enable an attacker to obtain sensitive information from the machine, which could be used for further system compromise.
Is there a workaround for CVE-2020-1091?
It is recommended to install the latest security updates as the primary way to mitigate CVE-2020-1091, as there are no effective workarounds.