CVE-2020-1207: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1207) exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, specifically related to win32kfull PDEVOBJ Use-After-Free. The vulnerability was discovered and disclosed in June 2020, affecting various versions of Microsoft Windows operating systems (MSRC Advisory, ZDI Advisory).

The vulnerability is classified as a Use-After-Free issue in the Windows kernel-mode driver. It has received a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The specific flaw exists within the handling of palette objects, where the system fails to validate the existence of an object prior to performing operations on it (ZDI Advisory).

If successfully exploited, this vulnerability allows an attacker to escalate privileges and execute code in the context of SYSTEM. The attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability (ZDI Advisory).

The vulnerability requires local access and low privileges to exploit. An attacker must first have the ability to execute low-privileged code on the target system. The vulnerability was reported to the vendor on February 11, 2020, and was publicly disclosed on June 9, 2020 (ZDI Advisory).

Microsoft has issued a security update to address this vulnerability. Users are advised to apply the appropriate patches through Windows Update (MSRC Advisory).