CVE-2020-1578: Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka 'Windows Kernel Information Disclosure Vulnerability'.
Other sources
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1578?
CVE-2020-1578 is rated as important due to its potential for exploiting information disclosure leading to kernel ASLR bypass.
How do I fix CVE-2020-1578?
To fix CVE-2020-1578, you should apply the recommended security updates provided by Microsoft for the affected Windows versions.
Which versions of Windows are affected by CVE-2020-1578?
CVE-2020-1578 affects Microsoft Windows 10 versions 1803, 1809, 1903, 1909, 2004 and Windows Server 2016 and 2019.
What type of vulnerability is CVE-2020-1578?
CVE-2020-1578 is classified as an information disclosure vulnerability in the Windows kernel.
Can CVE-2020-1578 be exploited remotely?
CVE-2020-1578 requires local access to be exploited, making remote exploitation unlikely.