CVE-2020-0756

CVE-2020-0756 is an information disclosure vulnerability in the Windows Cryptography Next Generation (CNG) service, affecting various versions of Windows 7, 8.1, 10, and Windows Server. This vulnerability allows an authenticated attacker to log on to an affected system and run a specially crafted application to disclose sensitive information. Rated Medium (CVSS 5.5), it requires local access and user interaction is not needed for exploitation, but the attacker must run a specific application. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it received some media coverage during Microsoft's February 2020 Patch Tuesday.