Threat Encyclopedia

Microsoft: Windows MSCTF Server Information Disclosure Vulnerability


What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.

affected-products-logoAffected Products

Windows Server version 20H2 (Server Core Installation)
Windows Server version 2004 (Server Core installation)
Windows Server version 1903 (Server Core installation)
Windows 10
Windows Server version 1909 (Server Core installation)
Windows Server 2019

CVE References