CVE-2020-1377: 
vulnerability analysis and mitigation

CVE-2020-1377 is a Windows Registry Elevation of Privilege Vulnerability that was discovered in the Windows Kernel API. The vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. This security flaw was assigned a CVSS score of 7.0, indicating a high severity level (NVD, Rapid7).

The vulnerability stems from improper handling of registry objects in memory by the Windows Kernel API. The technical nature of the flaw involves the CmpDoReDoCreateKey functionality, which can lead to arbitrary registry key creation. This vulnerability is unique from CVE-2020-1378 and requires local access to exploit (CVE).

A successful exploitation of this vulnerability could allow an attacker to gain elevated privileges on a targeted system. The attacker could potentially execute arbitrary code with elevated system privileges, effectively compromising the security of the affected system (NVD).

The vulnerability requires local authentication for exploitation. An attacker would need to run a specially crafted application on the target system to exploit this vulnerability. The attack complexity is considered low, as it doesn't require special conditions or circumstances to execute (Rapid7).

Microsoft has released security updates to address this vulnerability. The update ensures that the Windows Kernel API properly handles objects in memory. Multiple patches have been released for affected systems including Windows 10 (versions 1507 through 2004), Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019 (Rapid7).