CVE-2020-1520: 
vulnerability analysis and mitigation

A remote code execution vulnerability (CVE-2020-1520) exists in the Windows Font Driver Host due to improper memory handling. The vulnerability was disclosed in August 2020 and affects various versions of Microsoft Windows operating systems, including Windows 10, Windows 7, Windows 8.1, and multiple Windows Server versions (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (High) with vector (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerability stems from improper memory handling in the Windows Font Driver Host component (NVD).

If successfully exploited, this vulnerability would allow an attacker to gain execution privileges on a victim system, potentially leading to complete system compromise with the ability to execute arbitrary code (NVD).

The vulnerability requires local access and low attack complexity to exploit. An attacker would need low privileges but no user interaction to successfully exploit this vulnerability (NVD).

Microsoft has addressed this vulnerability by releasing a security update that corrects how the Windows Font Driver Host handles memory (NVD).