{"id":"CVE-2020-1510","aliases":["EUVD-2020-12384","GHSA-35v6-2x4q-9wxq"],"status":"published","title":"Win32k Information Disclosure Vulnerability","description":"An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.\nTo exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.\nThe security update addresses the vulnerability by correcting how win32k handles objects in memory.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.04813,"percentile":0.92031,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2020-08-17T19:13:19Z","modified":"2026-06-17T03:01:35Z","products":[{"vendor":"microsoft","product":"windows 10 version 1507"},{"vendor":"microsoft","product":"windows 10 version 1607"},{"vendor":"microsoft","product":"windows 10 version 1709"},{"vendor":"microsoft","product":"windows 10 version 1709 for 32-bit systems"},{"vendor":"microsoft","product":"windows 10 version 1803"},{"vendor":"microsoft","product":"windows 10 version 1809"},{"vendor":"microsoft","product":"windows 10 version 1903 for 32-bit systems"},{"vendor":"microsoft","product":"windows 10 version 1903 for arm64-based systems"},{"vendor":"microsoft","product":"windows 10 version 1903 for x64-based systems"},{"vendor":"microsoft","product":"windows 10 version 1909"},{"vendor":"microsoft","product":"windows 10 version 2004"},{"vendor":"microsoft","product":"windows_10"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1510","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1510"},{"url":"https://github.com/advisories/GHSA-35v6-2x4q-9wxq"}],"sources":{"cve":[{"id":"CVE-2020-1510","title":"Win32k Information Disclosure Vulnerability","description":"An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.\nTo exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.\nThe security update addresses the vulnerability by correcting how win32k handles objects in memory.","status":"published","published":"2020-08-17T19:13:19Z","modified":"2024-08-04T06:39:10.48Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:56.213477Z"}],"euvd":[{"id":"EUVD-2020-12384","description":"An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.\nTo exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.\nThe security update addresses the vulnerability by correcting how win32k handles objects in memory.","status":"published","published":"2020-08-17T19:13:19Z","modified":"2024-08-04T06:39:10Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-03T03:08:12.895997Z"}],"ghsa":[{"id":"GHSA-35v6-2x4q-9wxq","title":"An information disclosure vulnerability exists when the win32k component improperly provides...","description":"An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.","status":"published","published":"2022-05-24T17:25:51Z","modified":"2024-01-12T05:08:48Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:55:24.003446Z"}],"nvd":[{"id":"CVE-2020-1510","description":"An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.\nTo exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.\nThe security update addresses the vulnerability by correcting how win32k handles objects in memory.","status":"published","published":"2020-08-17T19:15:17.067Z","modified":"2026-06-17T03:01:35.95Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:13.05572Z"}]}}