CVE-2020-0875: 
vulnerability analysis and mitigation

An information disclosure vulnerability exists in how splwow64.exe handles certain calls, identified as CVE-2020-0875. The vulnerability affects various versions of Microsoft Windows 10 systems. When successfully exploited, this vulnerability could allow an attacker to obtain information to further compromise the user's system, specifically escalating from low-integrity to medium-integrity level access (NVD, CVE).

The vulnerability received a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. Under CVSS v2.0, it scored 4.3 (Medium) with the vector (AV:N/AC:M/Au:N/C:P/I:N/A:N). The vulnerability specifically relates to how the splwow64.exe process handles certain calls in the Windows operating system (NVD).

While this vulnerability by itself does not allow arbitrary code execution, it could be leveraged in combination with other vulnerabilities (such as remote code execution or elevation of privilege vulnerabilities) to enable arbitrary code execution with elevated privileges. The primary impact is the potential disclosure of information that could be used to further compromise the target system (CVE).

The vulnerability requires local access and user interaction to exploit. An attacker would need to combine this vulnerability with other vulnerabilities to achieve significant system compromise, making it a potential component in more complex attack chains (NVD).

Microsoft has released a security update that addresses the vulnerability by ensuring splwow64.exe properly handles the affected calls. The fix is available through the standard Windows Update mechanism (CVE).