CVE-2020-0955

—

CVSS 3.1

5.5 medium

EPSS

2%p73

Published

Apr 15, 2020 (Apr 15, 2020)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure in CPU Memory Access'.

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news1 stories

Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage

Cisco TalosApr 14, 18:08 UTC · Apr 14, 2020Vulnerability CVE-2020-0939 CVE-2020-0687 CVE-2020-0907+110 CVEs