CVE-2020-1463: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1463) exists in the way that the SharedStream Library handles objects in memory, also known as 'Windows SharedStream Library Elevation of Privilege Vulnerability'. The vulnerability was initially recorded on November 4, 2019, and was publicly disclosed in July 2020. The vulnerability affects multiple versions of Microsoft Windows 10 and Windows Server (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The CVSS v2.0 Base Score is 4.6 (MEDIUM) with the vector (AV:L/AC:L/Au:N/C:P/I:P/A:P). The vulnerability requires local access and low privileges for exploitation (NVD).

This vulnerability could allow an attacker to gain elevated privileges on affected systems. The high CVSS score indicates that successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the targeted system (NVD).

The vulnerability requires local access and low privileges for exploitation. Given its nature as an elevation of privilege vulnerability in the SharedStream Library, it could be exploited by attackers who already have a foothold on the system (NVD).

Microsoft has released security updates to address this vulnerability. The fix was included in Microsoft's July 2020 Patch Tuesday updates, which addressed a total of 123 security vulnerabilities (Krebs Security).