CVE-2020-1589

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1589Patch, Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1589Patch, Vendor Advisory

Published

Sep 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15884A SQL injection vulnerability in TableQuery.php in MunkiRepo…8.8
• CVE-2020-15885A Cross-Site Scripting (XSS) vulnerability in the comment mo…5.4
• CVE-2020-15886A SQL injection vulnerability in reportdata_controller.php i…8.8
• CVE-2020-15887A SQL injection vulnerability in softwareupdate_controller.p…8.8
• CVE-2020-15888Lua through 5.4.0 mishandles the interaction between stack r…8.8
• CVE-2020-15889Lua 5.4.0 has a getobjname heap-based buffer over-read becau…9.8
• CVE-2020-15890LuaJit through 2.1.0-beta3 has an out-of-bounds read because…7.5
• CVE-2020-15892An issue was discovered in apply.cgi on D-Link DAP-1520 devi…9.8
• CVE-2020-15893An issue was discovered on D-Link DIR-816L devices 2.x befor…9.8
• CVE-2020-15894An issue was discovered on D-Link DIR-816L devices 2.x befor…7.5
• CVE-2020-15895An XSS issue was discovered on D-Link DIR-816L devices 2.x b…6.1
• CVE-2020-15896An authentication-bypass issue was discovered on D-Link DAP-…7.5