Elevation of Privilege Vulnerability in Windows Feedback Hub by Microsoft
CVE-2020-1199

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Windows 10 Version 1809 For Hololens
Windows 10 Version 2004 For X64-based Systems
Windows
Windows 10 Version 1903 For X64-based Systems
Vendor
CVE Published:
9 June 2020

Summary

An elevation of privilege vulnerability exists in the Windows Feedback Hub due to improper handling of objects in memory. This issue could allow an attacker to execute arbitrary code with elevated privileges. If successfully exploited, it could lead to unauthorized actions being performed at higher access levels than intended, potentially compromising the security of the system. Users are advised to refer to official security guidelines for mitigation steps.

Affected Version(s)

Windows 10 Version 1709 for x64-based Systems

Windows 10 Version 1803 for x64-based Systems

Windows 10 Version 1809 for x64-based Systems

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.