CVE-2020-1201: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1201) exists in the Windows Now Playing Session Manager, specifically in how it handles objects in memory. The vulnerability was initially recorded on November 4, 2019, and was publicly disclosed on June 9, 2020. This vulnerability affects multiple versions of Microsoft Windows 10 (1709, 1803, 1809, 1903, 1909, 2004) and Windows Server 2016 (NVD, CVE Mitre).

The vulnerability has received a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (HIGH) with the vector string (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerability requires local access and low privileges for exploitation (NVD).

If successfully exploited, this vulnerability could allow an attacker to elevate their privileges on affected Windows systems. The high CVSS scores indicate that the vulnerability could potentially lead to complete compromise of confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability requires local access and low privileges for exploitation. The attack complexity is considered low, indicating that the attack can be performed with minimal conditions that need to be satisfied for a successful exploit (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Microsoft's security advisory (Microsoft Advisory).