CVE-2020-0912: 
vulnerability analysis and mitigation

CVE-2020-0912 is an elevation of privilege vulnerability that exists in the Windows Function Discovery SSDP Provider due to improper memory handling. The vulnerability was disclosed and published on September 11, 2020, affecting various Windows operating systems (NVD).

The vulnerability has received a CVSS 3.1 base score of 7.8 (HIGH) from NVD and 7.0 (HIGH) from Microsoft. The CVSS vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access required, low attack complexity, low privileges required, no user interaction needed, and high impacts on confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability allows an attacker to elevate privileges on the affected system. The attacker could then run specially crafted applications to gain elevated privileges, potentially gaining full control over the affected system (NVD).

To exploit this vulnerability, an attacker would first need to gain execution capabilities on the target system. Once achieved, they could run a specially crafted application to take advantage of the memory handling flaw in the Windows Function Discovery SSDP Provider (NVD).

Microsoft has addressed this vulnerability by releasing a security update that corrects how the Windows Function Discovery SSDP Provider handles memory. Users are advised to apply the available security patches to mitigate this vulnerability (NVD).