Read the docs
TI-2020-01321 Aliases CVE-2020-1361GHSA-rg4w-pmq3-w38h

An information disclosure vulnerability exists in the way that the WalletService handles…

Priority LOW 28Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need code execution on a victim system, aka 'Windows WalletService Information Disclosure Vulnerability'.

Why it matters now

EPSS 0.01346 71st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftWindows 10 Version 2004 for 32-bit Systemsall versions—No fix listedCNA
MicrosoftWindows 10 Version 2004 for x64-based Systemsall versions—No fix listedCNA
MicrosoftWindows 10 Version 2004 for ARM64-based Systemsall versions—No fix listedCNA
MicrosoftWindows Server, version 2004 (Server Core installation)all versions—No fix listedCNA
MicrosoftWindows10 Version 1809 for ARM64-based Systems; 10 Version 1709 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1709 for ARM64-based Systems; 10 Version 1803 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1709 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 for 32-bit Systems; 10 Version 1607 for 32-bit Systems; 10 for x64-based Systems; 10 Version 1607 for x64-based Systems—No fix listedCNA
MicrosoftWindows 10 Version 1903 for 32-bit Systemsall versions—No fix listedCNA
MicrosoftWindows 10 Version 1903 for x64-based Systemsall versions—No fix listedCNA
MicrosoftWindows Server2019; 2019 (Core installation); 2016 (Core installation); 2016—No fix listedCNA
MicrosoftWindows Server, version 1903 (Server Core installation)all versions—No fix listedCNA
MicrosoftWindows 10 Version 1903 for ARM64-based Systemsall versions—No fix listedCNA
MicrosoftWindows 10 Version 1909 for 32-bit Systemsall versions—No fix listedCNA
MicrosoftWindows 10 Version 1909 for x64-based Systemsall versions—No fix listedCNA
MicrosoftWindows Server, version 1909 (Server Core installation)all versions—No fix listedCNA
MicrosoftWindows 10 Version 1909 for ARM64-based Systemsall versions—No fix listedCNA
  • Windows 10 Version 2004 for 32-bit Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows 10 Version 2004 for x64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows 10 Version 2004 for ARM64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows Server, version 2004 (Server Core installation) VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows VendorMicrosoft Affected 10 Version 1809 for ARM64-based Systems; 10 Version 1709 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1709 for ARM64-based Systems; 10 Version 1803 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1709 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 for 32-bit Systems; 10 Version 1607 for 32-bit Systems; 10 for x64-based Systems; 10 Version 1607 for x64-based Systems Fixed in — No fix listed CNA
  • Windows 10 Version 1903 for 32-bit Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows 10 Version 1903 for x64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows Server VendorMicrosoft Affected 2019; 2019 (Core installation); 2016 (Core installation); 2016 Fixed in — No fix listed CNA
  • Windows Server, version 1903 (Server Core installation) VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows 10 Version 1903 for ARM64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows 10 Version 1909 for 32-bit Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows 10 Version 1909 for x64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows Server, version 1909 (Server Core installation) VendorMicrosoft Affected all versions Fixed in — No fix listed CNA
  • Windows 10 Version 1909 for ARM64-based Systems VendorMicrosoft Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*1607VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*1709VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*1803VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*1809VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*1903VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*1909VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*2004VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*1903VulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* Versions 1607 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* Versions 1709 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* Versions 1803 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* Versions 1809 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:* Versions 1903 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:* Versions 1909 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:* Versions 2004 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* Versions 1903 Vulnerable ·Microsoft
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*1909VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*2004VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:* Versions 1909 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:* Versions 2004 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1361
  2. 2026-10-03 Alias added: GHSA-rg4w-pmq3-w38h

References

Patch 1

  • TI-2015-02132 Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft… KEVCVSS 3.1HIGH 8.8
  • TI-2022-10056 Remote Procedure Call Runtime Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2022-06273 HTTP Protocol Stack Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2019-00906 Remote Desktop Services Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2022-15533 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2015-01587 Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… KEVCVSS 3.1MEDIUM 6.6
See all 2973 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences