CVE-2020-1151

Опубликовано: 12 мая 2020

Источник: msrc

CVSS3: 7

EPSS Средний

Описание

Windows Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.

An attacker could exploit this vulnerability by running a specially crafted application on the victim system.

The update addresses the vulnerability by correcting the way the Windows Runtime handles objects in memory.

Обновления

Продукт	Статья	Обновление
Windows 10 Version 1709 for 32-bit Systems	4556812	Security Update
Windows 10 Version 1709 for x64-based Systems	4556812	Security Update
Windows 10 Version 1803 for 32-bit Systems	4556807	Security Update
Windows 10 Version 1803 for x64-based Systems	4556807	Security Update
Windows Server, version 1803 (Server Core Installation)	4556807	Security Update
Windows 10 Version 1803 for ARM64-based Systems	4556807	Security Update
Windows 10 Version 1809 for 32-bit Systems	4551853	Security Update
Windows 10 Version 1809 for x64-based Systems	4551853	Security Update
Windows 10 Version 1809 for ARM64-based Systems	4551853	Security Update
Windows Server 2019	4551853	Security Update

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 93%

0.12134

Средний

7 High

CVSS3

Связанные уязвимости

CVE-2020-1151

CVSS3: 7.8

nvd

около 5 лет назад

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158, CVE-2020-1164.

GHSA-xpg5-pqgj-c3mp

github

около 3 лет назад

BDU:2020-02974