CVE-2020-1463: High severity windows 10 vulnerability
Published Jul 14, 2020
·Updated
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.
Affected Software
12 affected components
Microsoft Windows 10=1607
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1903
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows Server 2016
Microsoft Windows Server 2016=1903
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Jul 14, 2020
CVE Published
via MITRE·10:54 PM
Data Sourced
via MITRE·10:54 PM
DescriptionWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this vulnerability?
Exploitation requires local access and low-privileged access to the affected system; no user interaction is required. The CVSS vector indicates the vulnerability can be used to obtain elevated privileges on the same security authority.
2
Which systems should be prioritized for review?
Microsoft Windows 10, Microsoft Windows Server 2016, and Microsoft Windows Server 2019 are listed as affected. The provided data does not identify specific editions, builds, or patch levels.
3
What should be done to remediate the issue?
Apply the available patch. No alternative mitigation or workaround is provided in the available data.