CVE-2020-1308: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability exists in DirectX when it improperly handles objects in memory. This vulnerability, identified as CVE-2020-1308, was assigned in November 2019 and affects Microsoft Windows systems. The vulnerability could potentially allow an authenticated attacker to execute arbitrary code with kernel privileges (MITRE).

The vulnerability stems from improper memory object handling in DirectX. To exploit this vulnerability, an attacker would need to first log into the system and then run a specially crafted application that could take advantage of the memory handling flaw (MITRE).

If successfully exploited, this vulnerability allows an attacker to run arbitrary code in kernel mode, potentially enabling them to install programs, view or modify data, or create new accounts with full user rights (MITRE).

The vulnerability requires local authentication for exploitation. An attacker would need to have the ability to log into the target system and execute a specially crafted application to exploit this vulnerability (MITRE).

Microsoft has addressed this vulnerability by correcting how DirectX handles objects in memory through a security update (MITRE).