Vulnerability · Published Sep 11, 2020 · Assigned by microsoft
CVE-2020-1119Windows Information Disclosure Vulnerability
Medium 5.5
In plain English
A medium-severity security flaw in Windows 10 Version 1903 for 32-bit Systems from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).
Official description
<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting the way in which StartTileData.dll handles objects in memory.</p>
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 Version 1909 | 10.0.0 – before publication |
| Microsoft | Windows Server, version 1909 (Server Core installation) | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 – before publication |
| Microsoft | Windows Server, version 1903 (Server Core installation) | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 2004 | 10.0.0 – before publication |
| Microsoft | Windows Server version 2004 | 10.0.0 – before publication |