CVE-2020-0963

CVE-2020-0963 is an information disclosure vulnerability in the Windows GDI component, affecting various versions of Microsoft Windows and Windows Server. This medium-severity flaw (CVSS 6.5) allows an unauthenticated attacker to remotely disclose memory contents with low attack complexity, potentially leading to sensitive information exposure. While the EPSS score indicates a higher than average exploitability probability, there is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not on CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting limited public attention despite its inclusion in a May 2020 Patch Tuesday update.