CVE-2020-13523: Softperfect Ram Disk

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.

Affected products

• Softperfect Ram Disk: version 4.1 only

Published 2020-08-04. Last modified 2026-06-17.