Skip to content
OpenAdvisories
Medium · 5.5 Public exploit CVE-2020-16938 EUVD-2020-8896GHSA-pr2j-c9wc-9h25

Windows Kernel Information Disclosure Vulnerability

Published Oct 16, 2020 · Updated Aug 4, 2024 · Assigned by microsoft

Description

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>

Affected products

VendorProductAffectedFixed
Microsoft Windows 10 Version 2004 10.0.0 – < publication publication
Microsoft Windows Server version 2004 10.0.0 – < publication publication

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • ioncodes/CVE-2020-16938 ★ 194 · Oct 21, 2020

    Bypassing NTFS permissions to read any files as unprivileged user.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References