PT-2020-2782

CVE-2020-1247

Published

2020-06-09

Updated

2021-07-21

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 10 x64 1909 (OS Build 18363.719) Windows 10 version 10.0.18362.719 (WinBuild.160101.0800)

Description The issue is related to errors in processing objects in memory in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability exists, allowing attackers to affect the system.

Recommendations For Windows 10 x64 1909 (OS Build 18363.719), update to a version that includes the fix for this issue. For Windows 10 version 10.0.18362.719 (WinBuild.160101.0800), update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Win32k component until a patch is available.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products