Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rfwm-gjv2-882q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0676, CVE-2020-0677, CVE-2020-0748, CVE-2020-0756.

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0676, CVE-2020-0677, CVE-2020-0748, CVE-2020-0756.

EPSS

Процентиль: 67%
0.00542
Низкий

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.5
nvd
больше 5 лет назад

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0676, CVE-2020-0677, CVE-2020-0748, CVE-2020-0756.

CVSS3: 5.5
msrc
больше 5 лет назад

Windows Key Isolation Service Information Disclosure Vulnerability

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость службы Windows Cryptography Next Generation (CNG) операционных систем Windows, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 67%
0.00542
Низкий

Дефекты

CWE-200