CVE-2020-1275: 
vulnerability analysis and mitigation

CVE-2020-1275 is a Windows Kernel Elevation of Privilege Vulnerability that was disclosed on June 9, 2020. The vulnerability exists when the Windows kernel fails to properly handle objects in memory. This vulnerability affects multiple versions of Microsoft Windows including Windows 10 versions 1903, 1909, 2004, and Windows Server 2016 versions 1903, 1909, and 2004 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction, while potentially impacting confidentiality, integrity, and availability at high levels. Under CVSS v2.0, it received a base score of 4.6 (MEDIUM) with the vector (AV:L/AC:L/Au:N/C:P/I:P/A:P) (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems. The high CVSS score indicates that the vulnerability could lead to complete compromise of confidentiality, integrity, and availability of the affected system (NVD).

Microsoft has released security updates to address this vulnerability. Users and administrators of affected systems should apply the appropriate patches through the Microsoft security advisory (MSRC Advisory).