CVE-2020-1391

5.5 mediumEPSS 1.3%

An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in memory, aka 'Windows Agent Activation Runtime Information Disclosure Vulnerability'.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2020-07-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1391
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1391

Check your stack JSON