CVE-2020-1157: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1157) was discovered in the Windows Runtime, which improperly handles objects in memory. The vulnerability was disclosed on May 21, 2020, affecting various versions of Microsoft Windows 10 and Windows Server 2016 (NVD).

The vulnerability received a CVSS v3.1 base score of 7.8 (HIGH), with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access and user interaction, but no privileges, and can result in high impacts to confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability could allow an attacker to elevate privileges on affected systems, potentially gaining high-level access to system resources and sensitive data. The vulnerability affects multiple versions of Windows 10 and Windows Server 2016, making it a significant security concern for enterprise environments (NVD).

The vulnerability requires local access and user interaction to exploit. An attacker would need to have access to the target system and convince a user to perform specific actions to successfully exploit this vulnerability (NVD).

Microsoft has released security updates to address this vulnerability. Users and administrators of affected systems should apply the appropriate patches through Windows Update or Microsoft's security guidance (MSRC Advisory).