CVE-2020-1507 — Improper Privilege Management in Microsoft Windows 10 Version 1809
Severity
7.8HIGHNVD
EPSS
0.9%
top 23.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 11
Latest updateMay 24
Description
An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
To exploit the vulnerability, a user would have to open a specially crafted file.
The security update addresses the vulnerability by correcting how Microsoft COM for Windows handles objects in memory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages26 packages
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-p24f-9hfj-fg7m: An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory, aka 'Microsoft COM for Windows Ele↗2022-05-24
📋Vendor Advisories
1💬Community
1Bugzilla
▶