CVE-2020-1097

CVE-2020-1097 is an information disclosure vulnerability in the Windows GDI component affecting multiple versions of Microsoft Windows and Windows Server. An attacker could exploit this by convincing a user to open a malicious document or visit an untrusted webpage, leading to the disclosure of memory contents. Rated Medium severity with a CVSS score of 6.5, it requires user interaction and could result in high confidentiality impact. There is no evidence of active exploitation, public exploit code, or Metasploit modules, though it has received some community discussion and media coverage.