CVE-2020-17035: 
vulnerability analysis and mitigation

CVE-2020-17035 is a Windows Kernel Elevation of Privilege Vulnerability that was disclosed in November 2020. This vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10 and Windows Server (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, and low privileges to exploit, but can result in high impacts to confidentiality, integrity, and availability (NVD).

A successful exploitation of this vulnerability could allow an attacker who successfully exploited the vulnerability to gain elevated privileges and take control of an affected system. The attacker could then install programs, view or modify data, or create new accounts with full user rights (Qualys).

The vulnerability requires local access and low privileges to exploit. An attacker would need to have access to a local system to execute the exploit (NVD).

Microsoft has released security updates to address this vulnerability. Users are advised to apply the appropriate security updates for their affected systems through Windows Update or by downloading and installing the relevant patches (NVD).