CVE-2020-1507

EUVD-2020-12381 · Published Sep 11, 2020

An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft COM for Windows handles objects in memory.

Technologies

Microsoft Windows Server 2016Microsoft Windows 10Microsoft Windows Server 2019

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1507

Potentially impacted assets

See if this affects your attack surface