CVE-2020-0998: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-0998) exists in the Windows Graphics Component when it improperly handles objects in memory. The vulnerability was discovered and disclosed to Microsoft, who released a patch as part of their security updates. The vulnerability affects various versions of Windows 10 and its associated systems (Microsoft Advisory).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability occurs when the Windows Graphics Component improperly handles objects in memory, which could allow an attacker to run processes in an elevated context (NVD).

If successfully exploited, this vulnerability allows an attacker to run processes with elevated privileges. In a local attack scenario, this could lead to complete control over the affected system, potentially compromising the confidentiality, integrity, and availability of the system (NVD).

The vulnerability requires local access and can be exploited by running a specially crafted application. An attacker would need to have the ability to execute code on the target system to exploit this vulnerability (NVD).

Microsoft has addressed the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode. Users should apply the security update provided by Microsoft to mitigate this vulnerability (NVD).