Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3g9r-qc5h-97f4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1250.

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1250.

EPSS

Процентиль: 77%
0.01063
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.5
nvd
почти 5 лет назад

<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to either log on locally to an affected system, or convince a locally authenticated user to execute a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>

CVSS3: 5.5
msrc
почти 5 лет назад

Win32k Information Disclosure Vulnerability

CVSS3: 5.5
fstec
почти 5 лет назад

Уязвимость компонента win32k операционной системы Windows, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 77%
0.01063
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200