CVE-2020-1282: High severity windows 10 vulnerability

Published Jun 9, 2020

Updated

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1304, CVE-2020-1306, CVE-2020-1334.

Affected Software

18 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows 10=2004

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2016=2004

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1282

Event History

Jun 9, 2020

CVE Published

via MITRE·07:43 PM

Data Sourced

via MITRE·07:43 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1282?

CVE-2020-1282 is rated as important, indicating a significant elevation of privilege vulnerability.

How do I fix CVE-2020-1282?

To fix CVE-2020-1282, ensure that your Windows system is updated with the latest security patches provided by Microsoft.

What systems are affected by CVE-2020-1282?

CVE-2020-1282 affects multiple Windows systems including Windows 10, Windows Server 2012, and Windows Server 2019.

Can CVE-2020-1282 be exploited remotely?

CVE-2020-1282 requires local access for exploitation, meaning it cannot be exploited remotely.

What are the potential impacts of CVE-2020-1282?

The potential impact of CVE-2020-1282 is that an attacker could gain elevated privileges on the affected system.