Microsoft Windows WalletService CVE-2020-1361 Information Disclosure Vulnerability
Description
An information disclosure vulnerability exists in the way that the WalletService handles memory. To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application. The security update addresses the vulnerability by correcting how the WalletService handles memory.
Affected Applications
Windows Server version 2004 (Server Core installation)
Windows Server version 1903 (Server Core installation)
Windows Server 2016
Windows 10
Windows Server version 1909 (Server Core installation)
Windows Server 2019