CVE-2020-1303: Windows Runtime Elevation of Privilege Vulnerability

Overview

Severity: Medium (CVSS 5.5)
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Category: Elevation of Privilege
Exploit Status: Not Exploited
Exploitation Likelihood: Less Likely
Patch Tuesday: 2020-Sep
Released: 2020-09-08
EPSS Score: 23.55% (percentile: 96.0%)

Description

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows Runtime handles objects in memory.

Affected Products (20)

Other

11497
11498
11563
11568
11569
11570
11571
11572
11712
11713
11714
11715
11644
11645
11646
11647
11766
11767
11768
11769

Security Updates (4)

Acknowledgments

<a href="https://twitter.com/gebaltas">Georgios Baltas of MSRC Vulnerabilities & Mitigations Team</a>

Revision History

2020-09-08: Information published.