CVE-2020-1110: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability exists in the Windows Update Stack when it fails to properly handle objects in memory, identified as CVE-2020-1110. This vulnerability affects multiple versions of Windows 10 (1709, 1803, 1809, 1903, 1909) and Windows Server 2019 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability requires local access with low attack complexity and low privileges, but no user interaction is needed. The scope is unchanged, with high impact potential on confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems, potentially leading to complete system compromise with high impacts on confidentiality, integrity, and availability (NVD).

The vulnerability requires local access to the system with low attack complexity and low privileges to exploit. No user interaction is required for exploitation (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Windows Update to protect their systems (Microsoft Advisory).