CVE-2020-0859

CVE-2020-0859 is an information disclosure vulnerability in the Windows Modules Installer Service affecting various versions of Microsoft Windows, including Windows 10, 8.1, and Server editions. It has a CVSS score of 5.5 (Medium), indicating a low attack complexity and requiring local user privileges to disclose sensitive file information. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, including a Reddit post highlighting a potentially broken patch. This suggests a potential for future exploitation if the patch remains ineffective.