CVE-2020-1351: 
vulnerability analysis and mitigation

CVE-2020-1351 is an information disclosure vulnerability that exists when the Windows Graphics component improperly handles objects in memory. This vulnerability was discovered and reported to Microsoft, who assigned it the identifier 'Microsoft Graphics Component Information Disclosure Vulnerability'. The vulnerability affects various versions of Microsoft Windows operating systems (MITRE CVE, Rapid7).

The vulnerability has been assigned a CVSS score of 2.0 (Low severity) with the following vector: AV:L/AC:L/Au:N/C:P/I:N/A:N. This indicates that the vulnerability requires local access, has low attack complexity, requires no authentication, and can only result in partial confidentiality impact with no impact on integrity or availability (Rapid7).

The vulnerability could allow an attacker to obtain information disclosure from the affected Windows Graphics component. The impact is limited to information disclosure with no ability to modify or delete data (MITRE CVE).

Microsoft has released security updates to address this vulnerability across multiple Windows versions including Windows 10 (versions 1507 through 2004), Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019. Users are advised to apply the appropriate security updates: KB4565513, KB4565511, KB4565508, KB4565489, KB4558998, KB4565483, and KB4565503 (Rapid7).