CVE-2020-1528: 
vulnerability analysis and mitigation

CVE-2020-1528 is an elevation of privilege vulnerability in the Windows Radio Manager API that was disclosed in August 2020. The vulnerability exists due to improper memory handling in the Windows Radio Manager API. The affected systems include multiple versions of Windows 10 (1709, 1803, 1809, 1903, 1909, 2004) and Windows Server 2016/2019 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H according to NVD assessment. Microsoft's own assessment also rated it 7.8 (HIGH) but with a slightly different vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability stems from improper memory handling in the Windows Radio Manager API (NVD).

If successfully exploited, this vulnerability allows an attacker to elevate privileges on the affected system. The vulnerability affects confidentiality, integrity, and availability of the system, all rated as High impact in the CVSS scoring (NVD).

To exploit this vulnerability, an attacker would first need to gain execution access on the victim system. Once achieved, they could run a specially crafted application to elevate privileges (CVE).

Microsoft has addressed this vulnerability by releasing a security update that corrects how the Windows Radio Manager API handles memory. The fix is available through various KB updates including KB4565349, KB4565351, KB4566782, KB4571709, and KB4571741 (Rapid7).