Windows Key Isolation Service Information Disclosure Vulnerability

🗓️ 11 Feb 2020 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 21 Views

Windows Key Isolation Service Information Disclosure Vulnerability. Vulnerability in Cryptography Next Generation service allows attackers to run crafted application. Security update corrects memory handling.

Reporter	Title	Published	Views	Family All 49
BDU FSTEC	The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information	24 Feb 202000:00	–	bdu_fstec
CVE	CVE-2020-0676	11 Feb 202021:22	–	cve
Cvelist	CVE-2020-0676	11 Feb 202021:22	–	cvelist
EUVD	EUVD-2020-2169	7 Oct 202500:30	–	euvd
Microsoft KB	February 11, 2020—KB4537776 (OS Build 10240.18486)	11 Feb 202008:00	–	mskb
Microsoft KB	February 11, 2020—KB4537794 (Security-only update)	11 Feb 202008:00	–	mskb
Microsoft KB	February 11, 2020—KB4537803 (Security-only update)	11 Feb 202008:00	–	mskb
Microsoft KB	February 11, 2020—KB4537810 (Monthly Rollup)	11 Feb 202008:00	–	mskb
Microsoft KB	February 11, 2020—KB4537813 (Security-only update)	11 Feb 202008:00	–	mskb
Microsoft KB	February 11, 2020—KB4537814 (Monthly Rollup)	11 Feb 202008:00	–	mskb

Vulners

Node

microsoft windows_server,_version_1909_(server_core_installation)

OR

microsoft windows_10_version_1909_for_arm64-based_systems

OR

microsoft windows_10_version_1909_for_x64-based_systems

OR

microsoft windows_10_version_1909_for_32-bit_systems

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

11 Feb 2020 08:00Current

1.5Low risk

Vulners AI Score1.5

CVSS 22.1

CVSS 3.15.5

CVSS 35.5

EPSS0.01614

windows key isolation information disclosure cryptography next generation vulnerability security update memory handling attackers crafted application microsoft