PT-2020-1319

CVE-2020-0642

Published

2020-01-14

Updated

2022-04-26

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in the Win32k component of Windows, which fails to properly handle objects in memory. This can be exploited by an attacker using a specially crafted application to elevate their privileges. The vulnerability allows attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Bear13Oy

Vendors

Affected products

Weakness enumeration

CWE-269: Improper Privilege Management

CWE-416: Use After Free

Related identifiers