PT-2020-2782 · Microsoft · Windows 10+1

Junjie He + 5 · Published 2020-06-09 · Updated 2021-07-21 · CVE-2020-1247

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 10 x64 1909 (OS Build 18363.719) Windows 10 version 10.0.18362.719 (WinBuild.160101.0800)

Description The issue is related to errors in processing objects in memory in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability exists, allowing attackers to affect the system.

Recommendations For Windows 10 x64 1909 (OS Build 18363.719), update to a version that includes the fix for this issue. For Windows 10 version 10.0.18362.719 (WinBuild.160101.0800), update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Win32k component until a patch is available.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-02877

CVE-2020-1247

Affected Products

Windows

Windows 10

References · 9

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1247 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1247 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1247 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1247 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02877 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1247 · Security Note
• https://t.me/cybersecuritytechnologies/1691 · Telegram Post
• https://t.me/freedomf0x/9466 · Telegram Post
• https://t.me/ckure/5418 · Telegram Post