CVE-2020-0736

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka Windows Kernel Information Disclosure Vulnerability.

Risk Information

Base Score
5.4
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.978

Associated Vulnerability

VulnerabilityOS Platform
Scripting Engine Memory Corruption Vulnerability for Windows 7 for x64-based Systems (KB4537820)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4537820)Windows
Scripting Engine Memory Corruption Vulnerability for Windows 7 for x86-based Systems (KB4537820)Windows
Windows Search Indexer Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4537813)Windows
Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4537813)Windows
Windows Search Indexer Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB4537813)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2008 for x86-based Systems (KB4537810)Windows
Scripting Engine Memory Corruption Vulnerability for Windows Server 2008 for x64-based Systems (KB4537810)Windows
Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB4537822)Windows
Windows Search Indexer Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB4537822)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-283312020-02 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4537820) (ESU)
PATCH-283322020-02 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4537820) (ESU)
PATCH-283332020-02 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4537820) (ESU)
PATCH-283522020-02 Security Only Quality Update for Windows 7 for x64-based Systems (KB4537813) (ESU)
PATCH-283532020-02 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4537813) (ESU)
PATCH-283542020-02 Security Only Quality Update for Windows 7 for x86-based Systems (KB4537813) (ESU)
PATCH-283372020-02 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB4537810) (ESU)
PATCH-283382020-02 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB4537810) (ESU)
PATCH-283582020-02 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4537822) (ESU)
PATCH-283592020-02 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4537822) (ESU)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234