CVE-2020-17027: 
vulnerability analysis and mitigation

CVE-2020-17027 is a Windows Remote Access Elevation of Privilege Vulnerability that was disclosed on November 10, 2020. The vulnerability affects multiple versions of Microsoft Windows, including Windows 10 (versions 1507 through 20H2) and Windows Server installations (NVD, Rapid7).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access is required, low attack complexity, low privileges required, and no user interaction needed. The potential impact includes high levels of compromise to confidentiality, integrity, and availability (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected Windows systems. The high CVSS scores for confidentiality, integrity, and availability (all rated as High) indicate that successful exploitation could result in significant system compromise (NVD).

The vulnerability requires local access and low privileges for exploitation. The attack complexity is rated as low, suggesting that once an attacker has the necessary local access, the vulnerability is relatively straightforward to exploit (NVD).

Microsoft has released security updates to address this vulnerability. The fixes are available through various KB updates including KB4586781, KB4586785, KB4586786, KB4586787, KB4586793, KB4586823, and KB4586830 for different affected Windows versions (Rapid7).