CVE-2020-1143: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1143) was identified in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, also known as 'Win32k Elevation of Privilege Vulnerability'. The vulnerability was disclosed on May 21, 2020, and affects various Windows operating systems (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (HIGH) with the vector (AV:L/AC:L/Au:N/C:C/I:C/A:C). This indicates that the vulnerability requires local access with low attack complexity and privileges to exploit (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected Windows systems. The high CVSS scores indicate potential severe impacts on the confidentiality, integrity, and availability of the affected systems (NVD).

The vulnerability requires local access to exploit, with low attack complexity and low privileges required. No public exploits or active exploitation in the wild were reported at the time of disclosure (NVD).

Microsoft has released security updates to address this vulnerability. Users are advised to apply the appropriate patches through Windows Update (Microsoft Advisory).