An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka ‘Windows Kernel Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0668, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_10 | Microsoft | 1803 | 1803 |
| Windows_10 | Microsoft | 1809 | 1809 |
| Windows_10 | Microsoft | 1903 | 1903 |
| Windows_10 | Microsoft | 1909 | 1909 |
| Windows_server_2016 | Microsoft | 1803 | 1803 |
| Windows_server_2016 | Microsoft | 1903 | 1903 |
| Windows_server_2016 | Microsoft | 1909 | 1909 |
| Windows_server_2019 | Microsoft | - | - |