CVE-2020-1075
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
Information disclosure vulnerability in Windows Subsystem for Linux due to improper handling of objects in memory. An attacker could obtain information to further compromise the user's system.
Risk Assessment
Information disclosure could allow an attacker to obtain data that increases the chances of a successful attack on the system.
Recommendation
Install the security update that corrects how Windows Subsystem for Linux handles objects in memory.
Other vulnerabilities in Windows Subsystem for Linux
See all- CVE-2017-8622High
The vulnerability in Windows Subsystem for Linux in Windows 10 1703 allows for elevation of privilege when it fails to properly handle NT pipes handles.
- CVE-2026-57973Medium
A TOCTOU race condition in Windows Subsystem for Linux (WSL) allows an authorized attacker to perform local tampering. The vulnerability stems from a race between resource check and use.
- CVE-2026-57968High
A buffer over-read vulnerability in Windows Subsystem for Linux (WSL) allows an authorized attacker to elevate privileges locally.
- CVE-2021-36966High
Vulnerability in Windows Subsystem for Linux allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. A attacker could exploit this vulnerability by running a specially crafted application. The update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.