CVE-2020-1484: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1484) was discovered in the Windows Work Folders Service due to improper memory handling. The vulnerability was disclosed on August 17, 2020, affecting various versions of Microsoft Windows operating systems (NVD).

The vulnerability received a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, and low privileges to exploit, but can result in high impacts to confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability allows an attacker who has already gained execution on a victim system to elevate their privileges by running a specially crafted application. The vulnerability affects multiple versions of Windows including Windows 10, Windows Server 2016, and Windows Server 2019 (NVD).

To exploit this vulnerability, an attacker must first gain execution access to the target system. The attacker can then run a specially crafted application to take advantage of the memory handling flaw in the Windows Work Folders Service to elevate their privileges (CVE).

Microsoft has addressed this vulnerability by releasing a security update that corrects how the Windows Work Folders Service handles memory. Users are advised to apply the appropriate security patches for their specific Windows version (NVD).