Vulnerability Details CVE-2020-0728
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.038
EPSS Ranking 89.9%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.9
References
- http://packetstormsecurity.com/files/156394/Microsoft-Windows-Modules-Installer-Service-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2020/Feb/16
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0728
- https://seclists.org/bugtraq/2020/Feb/21
- http://packetstormsecurity.com/files/156394/Microsoft-Windows-Modules-Installer-Service-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2020/Feb/16
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0728
- https://seclists.org/bugtraq/2020/Feb/21
Products affected by CVE-2020-0728
-
cpe:2.3:o:microsoft:windows_10:1607
-
cpe:2.3:o:microsoft:windows_10:1709
-
cpe:2.3:o:microsoft:windows_10:1803
-
cpe:2.3:o:microsoft:windows_10:1809
-
cpe:2.3:o:microsoft:windows_10:1903
-
cpe:2.3:o:microsoft:windows_10:1909
-
cpe:2.3:o:microsoft:windows_server_2016:-
-
cpe:2.3:o:microsoft:windows_server_2016:1803
-
cpe:2.3:o:microsoft:windows_server_2016:1903
-
cpe:2.3:o:microsoft:windows_server_2016:1909
-
cpe:2.3:o:microsoft:windows_server_2019:-