Microsoft COM for Windows Elevation of Privilege Vulnerability
Published Sep 11, 2020
7.9
HIGHCVSS 3.1
EPSS 2.74%
Description
<p>An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.</p> <p>To exploit the vulnerability, a user would have to open a specially crafted file.</p> <p>The security update addresses the vulnerability by correcting how Microsoft COM for Windows handles objects in memory.</p>
Affected products
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
-
- Version 10.0.0StatusaffectedConstraints<publication
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 1809 | n/a |
| ||||||
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | n/a |
| ||||||
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | n/a |
| ||||||
| Microsoft | Windows 10 Version 1903 for x64-based Systems | n/a |
| ||||||
| Microsoft | Windows 10 Version 1909 | n/a |
| ||||||
| Microsoft | Windows 10 Version 2004 | n/a |
| ||||||
| Microsoft | Windows Server 2019 | n/a |
| ||||||
| Microsoft | Windows Server 2019 (Server Core installation) | n/a |
| ||||||
| Microsoft | Windows Server version 2004 | n/a |
| ||||||
| Microsoft | Windows Server, version 1903 (Server Core installation) | n/a |
| ||||||
| Microsoft | Windows Server, version 1909 (Server Core installation) | n/a |
|
- 1809
- 1903
- 1909
- 2004
- 1903
- 1909
- 2004
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
No CWE recorded.
References (1)
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1507 x_refsource_MISCPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1507 | x_refsource_MISCPatchVendor Advisory |
Change history (0)
No recorded changes yet.