Vulnerability · Published Aug 17, 2020 · Assigned by microsoft
CVE-2020-1459Windows ARM Information Disclosure Vulnerability
High 7.5
In plain English
A high-severity security flaw in Windows 10 Version 1809 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.5% (higher than 91% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)4.5%top 8.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation." To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application. The security update addresses the vulnerability by bypassing the speculative execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 Version 1809 | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1909 | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 2004 | 10.0.0 – before publication |