CVE-2020-1125— Windows Runtime Elevation of Privilege Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows 10 Version 1507

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows Runtime（.net framework）是美国微软（Microsoft）公司的一款Windows操作系统中必要的功能支持库。 Microsoft Windows Runtime中存在提权漏洞，该漏洞源于程序没有正确处理内存中的对象。攻击者可借助特制应用程序利用该漏洞提升权限，运行任意代码。以下产品及版本受到影响：Microsoft Windows 8.1，Windows RT 8.1，Windows 10，Windows Server 2016，Windows S

CVE-2020-1125 affects Microsoft Windows 10 Version 1507. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows Runtime（.net framework）是美国微软（Microsoft）公司的一款Windows操作系统中必要的功能支持库。 Microsoft Windows Runtime中存在提权漏洞，该漏洞源于程序没有正确处理内存中的对象。攻击者可借助特制应用程序利用该漏洞提升权限，运行任意代码。以下产品及版本受到影响：Mi CVE-2020-1125 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2020-1125

I. Basic Information for CVE-2020-1125

Affected Products

II. Public POCs for CVE-2020-1125

III. Intelligence Information for CVE-2020-1125

Vendor Advisories for CVE-2020-1125 (2)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1125 x_refsource_MISC
• 🔗 Security Update Guide - Microsoft Security Response Center vendor-advisory patch

• https://www.cve.org/CVERecord?id=CVE-2020-1125

Same Patch Batch · Microsoft · 2020-05-21 · 112 CVEs total

Showing top 20 of 112 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-1125