CVE-2020-1184: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability exists in the Windows State Repository Service when it improperly handles objects in memory. This vulnerability is identified as CVE-2020-1184 and is known as 'Windows State Repository Service Elevation of Privilege Vulnerability'. The vulnerability affects multiple versions of Windows 10 and Windows Server 2016 (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The CVSS v2.0 base score is 4.6 (MEDIUM) with the vector (AV:L/AC:L/Au:N/C:P/I:P/A:P). This indicates that the vulnerability requires local access, low attack complexity, and low privileges to exploit (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on the affected system. The high CVSS scores for confidentiality, integrity, and availability impact (C:H/I:H/A:H) indicate that successful exploitation could result in a complete compromise of the system's security (NVD).

The vulnerability requires local access to the system and low privileges to exploit. The attack complexity is considered low, suggesting that the vulnerability is relatively straightforward to exploit once an attacker has the necessary local access (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate security patches through Windows Update to mitigate this vulnerability (MSRC).