CVE-2020-1079: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1079) was identified in Microsoft Windows, discovered in November 2019 and publicly disclosed in May 2020. The vulnerability exists when Windows fails to properly handle objects in memory. This vulnerability is distinct from CVE-2020-1010 and CVE-2020-1068, affecting multiple versions of Windows including Windows 10, Windows 8.1, and Windows RT 8.1 (NVD Database, CVE Mitre).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH), with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (HIGH) with the vector (AV:L/AC:L/Au:N/C:C/I:C/A:C). The technical assessment indicates local access is required for exploitation, with low attack complexity and privilege requirements (NVD Database).

The vulnerability could allow an attacker to gain elevated privileges on affected systems, potentially leading to complete system compromise with high impacts on confidentiality, integrity, and availability of the affected system (NVD Database).

The vulnerability requires local access to the system for exploitation, with low attack complexity and privilege requirements. No public exploits or active exploitation in the wild have been reported at the time of assessment (NVD Database).

Microsoft has released security updates to address this vulnerability. Users are advised to apply the appropriate patches through Windows Update (Microsoft Advisory).