Rapid7 Vulnerability & Exploit Database

Microsoft CVE-2020-1578: Windows Kernel Information Disclosure Vulnerability

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

Microsoft CVE-2020-1578: Windows Kernel Information Disclosure Vulnerability

Severity
2
CVSS
(AV:L/AC:M/Au:N/C:P/I:N/A:N)
Published
08/11/2020
Created
08/12/2020
Added
08/11/2020
Modified
11/18/2021

Description

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.

Solution(s)

  • msft-kb4565349-115cb91a-8f54-419b-b3d7-25043fa4e135
  • msft-kb4565349-1a60eaaa-a7bd-4c92-bfb2-5f4fc5ab8eaf
  • msft-kb4565349-1e857e5a-9432-4eaa-8c29-a755cc55f91d
  • msft-kb4565351-4274f60c-bfeb-463c-9754-001689926626
  • msft-kb4565351-6d1a581f-9559-4c0d-9f5d-48e5dcf78018
  • msft-kb4565351-79957fb4-42c8-48d0-9629-788f4529cdf4
  • msft-kb4565351-79b74e87-e7f9-446e-a595-b7e944725115
  • msft-kb4565351-cbce42fb-565a-4c61-a8cc-c6dc535a10c0
  • msft-kb4565351-d6073ce0-e5b9-4059-8bc9-76e300e54896
  • msft-kb4566782-27424da3-f49f-4344-ae4e-045a0a838044
  • msft-kb4566782-3228b635-f5af-4686-9292-66b5b8aea06c
  • msft-kb4566782-912b8b41-c59a-4078-bfbf-fb69a4d8c0b3
  • msft-kb4571709-9b65ac66-ab1d-4b6d-a5ea-f5892a1ffc01
  • msft-kb4571709-db45332d-658c-455c-80bc-9813e1b1b3dc

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;