Description
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object.
To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.
The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.
To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.
The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 1803 | affected |
|
||||||
| Microsoft | Windows 10 Version 1809 | affected |
|
||||||
| Microsoft | Windows Server 2019 | affected |
|
||||||
| Microsoft | Windows Server 2019 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1909 | affected |
|
||||||
| Microsoft | Windows Server, version 1909 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for x64-based Systems | affected |
|
||||||
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | affected |
|
||||||
| Microsoft | Windows Server, version 1903 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows 10 Version 2004 | affected |
|
||||||
| Microsoft | Windows Server version 2004 | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Mon, 23 Feb 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses. | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object. To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses. |
MITRE
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2024-08-04T06:39:10.638Z
Reserved: 2019-11-04T00:00:00.000Z
Link: CVE-2020-1578
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-08-17T19:15:21.240
Modified: 2026-02-23T18:25:41.803
Link: CVE-2020-1578
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses