CVE-2020-1160: 
vulnerability analysis and mitigation

An information disclosure vulnerability (CVE-2020-1160) exists in the Microsoft Windows Graphics Component when it improperly handles objects in memory. This vulnerability was discovered and reported in November 2019, with public disclosure in June 2020. The vulnerability affects multiple versions of Microsoft Windows 10 and Windows 7 SP1 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction. The impact is primarily focused on confidentiality, with no impact on integrity or availability (NVD).

The vulnerability could allow an attacker to obtain information disclosure from the affected system. The attack specifically targets the Windows Graphics Component's memory handling, potentially exposing sensitive information (NVD).

The vulnerability requires local access to the system and low privileges for exploitation. No known exploits in the wild have been reported at the time of disclosure (NVD).

Microsoft has released security updates to address this vulnerability. Users are advised to apply the appropriate patches through Windows Update (Microsoft Advisory).