CVE-2020-0746
vulnerability analysis and mitigation

Overview

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, identified as CVE-2020-0746. The vulnerability was disclosed in February 2020 as part of Microsoft's Patch Tuesday updates. This vulnerability was classified as 'important' among the 98 vulnerabilities addressed in that month's security updates (Talos Blog, NVD).

Technical details

The vulnerability specifically relates to how Microsoft Graphics Components handle objects in memory, which could potentially lead to information disclosure. The issue was assigned and documented in November 2019, though it was publicly disclosed in February 2020 (CVE Mitre).

Impact

If successfully exploited, this vulnerability could lead to unauthorized information disclosure, potentially exposing sensitive data handled by Microsoft Graphics Components (NVD).

Mitigation and workarounds

Microsoft addressed this vulnerability as part of their February 2020 Patch Tuesday security updates. Users are advised to apply the security updates provided by Microsoft to mitigate this vulnerability (Talos Blog).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management