CVE-2020-0885

—

CVSS 3.1

4.3 medium

EPSS

5%p91

Published

Mar 12, 2020 (Mar 12, 2020)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'.

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.6%)

In the news1 stories

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

Cisco TalosMar 10, 17:23 UTC · Mar 10, 2020Vulnerability CVE-2020-0796 CVE-2020-0684 CVE-2020-0801+114 CVEs