CVE-2020-1116: 
vulnerability analysis and mitigation

An information disclosure vulnerability exists in the Windows Client Server Run-Time Subsystem (CSRSS) when it fails to properly handle objects in memory, identified as CVE-2020-1116. This vulnerability affects various versions of Microsoft Windows operating systems including Windows 10, Windows 8.1, and Windows 7 SP1 (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction. The vulnerability can lead to high confidentiality impact, but does not affect integrity or availability (NVD).

The vulnerability can result in information disclosure, potentially allowing an attacker to access sensitive information from memory. The impact is limited to confidentiality, with no direct impact on system integrity or availability (NVD).

The vulnerability requires local access to the system and low privileges to exploit. The attack complexity is considered low, indicating that the vulnerability is relatively straightforward to exploit once access is obtained (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Windows Update to protect their systems (Microsoft Advisory).