CVE-2020-1072: 
vulnerability analysis and mitigation

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, known as 'Windows Kernel Information Disclosure Vulnerability'. This vulnerability was assigned CVE-2020-1072 and was first recorded on November 4, 2019 (CVE MITRE, NVD).

The vulnerability has been assessed with multiple CVSS scores. Under CVSS 3.1, it received a base score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Under CVSS 2.0, it received a base score of 2.1 (LOW) with the vector string (AV:L/AC:L/Au:N/C:P/I:N/A:N). The vulnerability requires local access and low privileges to exploit (NVD).

This vulnerability could allow an attacker to obtain information disclosure from the Windows kernel when it improperly handles objects in memory. The impact is primarily focused on confidentiality, with no direct impact on integrity or availability (NVD).

The vulnerability requires local access with low attack complexity and low privileges to exploit. No user interaction is needed for exploitation (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Microsoft's security advisory (Microsoft Advisory).