CVE-2020-1378
EUVD-2020-1225417.08.2020, 19:15
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly handles objects in memory.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_10 | - |
| microsoft | windows_7 | - |
| microsoft | windows_8.1 | - |
| microsoft | windows_rt_8.1 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2012 | - |
| microsoft | windows_server_2016 | - |
| microsoft | windows_server_2019 | - |
𝑥
= Vulnerable software versions
Windows Releases
Platform | Version | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows 10 |
| ||||||||||||||||
| Windows 7 |
| ||||||||||||||||
| Windows 8.1 |
| ||||||||||||||||
| Windows RT 8.1 |
| ||||||||||||||||
| Windows Server |
| ||||||||||||||||
| Windows Server 2008 |
| ||||||||||||||||
| Windows Server 2008 R2 |
| ||||||||||||||||
| Windows Server 2012 |
| ||||||||||||||||
| Windows Server 2012 R2 |
| ||||||||||||||||
| Windows Server 2016 |
| ||||||||||||||||
| Windows Server 2019 |
|
Common Weakness Enumeration
References