CVE-2020-1402: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory. This vulnerability was assigned CVE-2020-1402 and was addressed in Microsoft's July 2020 security updates (Microsoft Bulletin).

The vulnerability affects the Windows ActiveX Installer Service and stems from improper memory handling. To exploit this vulnerability, an attacker would first need to gain execution on the victim system (CVE Details).

If successfully exploited, an attacker could gain the same user rights as the current user. This could potentially allow the attacker to gain elevated privileges on the affected system (Microsoft Bulletin).

The vulnerability requires an attacker to first gain execution access to the target system before exploitation is possible. This requirement somewhat reduces the immediate risk of remote exploitation (CVE Details).

Microsoft has released security updates to address this vulnerability as part of their July 2020 Patch Tuesday updates. Users are advised to apply the relevant security updates to affected systems (Microsoft Bulletin).