CVEvulnerability
CVE-2020-1381
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-07-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1382.
Affected configurations
• microsoft windows 10 1903
• microsoft windows 10 1909
• microsoft windows 10 2004
• microsoft windows server 2016 1903
• microsoft windows server 2016 1909
• microsoft windows server 2016 2004
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1381 Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-872/ Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1381 Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-872/ Third Party Advisory