CVE-2020-1156: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, known as 'Windows Runtime Elevation of Privilege Vulnerability'. This vulnerability was assigned CVE-2020-1156 and was disclosed in May 2020. The vulnerability affects various versions of Microsoft Windows 10 and Windows Server 2016 (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The CVSS v2.0 Base Score is 6.8 (MEDIUM) with vector (AV:N/AC:M/Au:N/C:P/I:P/A:P). The vulnerability is related to how Windows Runtime handles objects in memory (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems. The high CVSS score indicates that the vulnerability could lead to significant impacts on confidentiality, integrity, and availability of the affected systems (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate security updates through the Microsoft Security Update Guide (Microsoft Advisory).