CVE-2020-1507: 
vulnerability analysis and mitigation

CVE-2020-1507 is an elevation of privilege vulnerability that exists in the way Microsoft COM for Windows handles objects in memory. The vulnerability was discovered and assigned in November 2019, affecting various versions of Windows 10 and Windows Server 2016/2019 systems (NVD).

The vulnerability has a CVSS 3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H according to NVD assessment. Microsoft's assessment rated it slightly differently with a CVSS score of 7.9 (HIGH) and vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N (NVD).

If successfully exploited, this vulnerability allows an attacker to gain elevated privileges on a targeted system. The attack requires a user to open a specially crafted file, which could lead to complete system compromise (CVE).

The vulnerability requires local access and user interaction to exploit, specifically requiring a user to open a specially crafted file. No public exploits were known at the time of disclosure (NVD).

Microsoft addressed this vulnerability by releasing a security update that corrects how Microsoft COM for Windows handles objects in memory (CVE).