CVE-2020-1391

EUVD-2020-12267
An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in memory, aka 'Windows Agent Activation Runtime Information Disclosure Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Windows Releases
Platform
Version
Windows 10
1903 (arm64, x64, x86)
KB4565483
1909 (arm64, x64, x86)
KB4565483
2004 (arm64, x64, x86)
KB4565503
Windows Server
1903 Server Core
KB4565483
1909 Server Core
KB4565483
2004 Server Core
KB4565503
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1391
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1391