CVE-2020-1459HighCVSS 5.5
Windows ARM Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation." To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application. The security update addresses the vulnerability by bypassing the speculative execution.
🎯 Affected products4
- Windows 10 Version 1809 for ARM64-based Systems
- Windows 10 Version 1903 for ARM64-based Systems
- Windows 10 Version 1909 for ARM64-based Systems
- Windows 10 Version 2004 for ARM64-based Systems
✅ Remediation
KB4565349 (Security Update) KB4565351 (Security Update) KB4566782 (Security Update)
🔗 References (6)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1459
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565349
- referencehttps://support.microsoft.com/help/4565349
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565351
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4566782
- referencehttps://support.microsoft.com/help/4566782