An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2020-1337) - An information disclosure vulnerability exists when the Windows WaasMedic Service improperly handles memory.