CVE-2020-1303 - Windows Runtime Elevation of Privilege Vulnerability

Back Back to CVE browser

HIGH

Windows Runtime Elevation of Privilege Vulnerability

Published Sep 11, 2020

7.8

HIGH

CVSS 3.1

EPSS 4.26%

Description

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows Runtime handles objects in memory.

Affected products

Vendor Microsoft Product Windows 10 Version 1803 Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows 10 Version 1809 Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows 10 Version 1903 for 32-bit Systems Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows 10 Version 1903 for ARM64-based Systems Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows 10 Version 1903 for x64-based Systems Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows 10 Version 1909 Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows 10 Version 2004 Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows Server 2019 Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows Server version 2004 Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows Server, version 1903 (Server Core installation) Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication
Vendor Microsoft Product Windows Server, version 1909 (Server Core installation) Default
n/a
- Version
 10.0.0
 Status
 affected
 Constraints
 <publication

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1803

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows 10 Version 1809

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows 10 Version 1903 for 32-bit Systems

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows 10 Version 1903 for ARM64-based Systems

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows 10 Version 1903 for x64-based Systems

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows 10 Version 1909

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows 10 Version 2004

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows Server 2019

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows Server 2019 (Server Core installation)

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows Server version 2004

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows Server, version 1903 (Server Core installation)

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Microsoft

Windows Server, version 1909 (Server Core installation)

n/a

Version	Status	Constraints
10.0.0	affected	<publication

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12181
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1303
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12181		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1303		x_refsource_MISCPatchVendor Advisory