CVE-2020-0983: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-0983) exists when the Windows Delivery Optimization service improperly handles objects in memory. This vulnerability was disclosed in April 2020 and affects multiple versions of Microsoft Windows, including Windows 10 and Windows Server 2016 (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, and low privileges to exploit, with no user interaction needed. The potential impact affects confidentiality, integrity, and availability, all with high severity (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems. The high CVSS score indicates that successful exploitation could lead to complete compromise of the system's confidentiality, integrity, and availability (NVD).

Microsoft has released security updates to address this vulnerability. The fixes are available through various KB updates depending on the Windows version: KB4550929 for Windows 10 version 1607, KB4549949 for version 1809, and KB4549951 for versions 1903 and 1909 (Rapid7).