CVE-2020-0998Improper Privilege Management in Microsoft Windows 10 Version 1607

Severity
7.8HIGHNVD
EPSS
0.4%
top 41.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11
Latest updateMay 24

Description

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system. The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages18 packages

CVEListV5microsoft/windows_8.16.3.0publication

Patches

🔴Vulnerability Details

2
GHSA
GHSA-cf35-v9jm-w658: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Compone2022-05-24
CVEList
Windows Graphics Component Elevation of Privilege Vulnerability2020-09-11

📋Vendor Advisories

1
Microsoft
Windows Graphics Component Elevation of Privilege Vulnerability2020-09-08
CVE-2020-0998 — Improper Privilege Management | cvebase