CVE-2020-1548

Windows WaasMedic Service Information Disclosure Vulnerability

High · published August 17, 2020

CVSS v3.1
7.8
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists when the Windows WaasMedic Service improperly handles memory.

To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to improperly disclose memory.

The security update addresses the vulnerability by correcting how the Windows WaasMedic Service handles memory.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01183 · 67.5th percentile
Published
2020-08-17T19:13Z
EPSS history
Timeline
  • 17 AUG 19:13Z
    Windows WaasMedic Service Information Disclosure Vulnerability
    cvelistv5