Vulnerabilities > CVE-2020-1361 - Unspecified vulnerability in Microsoft products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

microsoft

NVD

Published: 2020-07-14

Updated: 2021-07-21

Summary

An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need code execution on a victim system, aka 'Windows WalletService Information Disclosure Vulnerability'.

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows 10 1607 Microsoft Windows 10 - Microsoft Windows 10 1709 Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 10 1903 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows Server 2016 - Microsoft Windows Server 2016 1903 Microsoft Windows Server 2016 1909 Microsoft Windows Server 2016 2004 Microsoft Windows Server 2019 -	13

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1361