CVE-2020-1353: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1353) exists when the Windows Runtime improperly handles objects in memory. This vulnerability was discovered and assigned on November 4, 2019, and affects various versions of Microsoft Windows 10 and Windows Server systems (MITRE CVE, NVD Details).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements with low attack complexity and privilege requirements. Under CVSS v2.0, it received a base score of 4.6 (MEDIUM) with vector (AV:L/AC:L/Au:N/C:P/I:P/A:P) (NVD Details).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems. The high CVSS score indicates potential serious impacts on confidentiality, integrity, and availability of the affected systems (NVD Details).

The vulnerability requires local access to the system for exploitation, with low attack complexity. No evidence of active exploitation in the wild has been publicly reported (NVD Details).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Windows Update to protect their systems (Microsoft Advisory).