by Kastro
Paper/Archive/CVE-2020-0690

CVE-2020-0690

Microsoft Windows — An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vul…

EPSS 7%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 94.1.941 × 2018.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.

Affected

ProductAffectedFixed inSource
Windows10 Version 1803 for 32-bit Systems–CNA
Windows10 Version 1803 for x64-based Systems–CNA
Windows10 Version 1803 for ARM64-based Systems–CNA
Windows10 Version 1809 for 32-bit Systems–CNA
Windows10 Version 1809 for x64-based Systems–CNA
Windows10 Version 1809 for ARM64-based Systems–CNA
Windows10 Version 1709 for 32-bit Systems–CNA
Windows10 Version 1709 for x64-based Systems–CNA
Windows10 Version 1709 for ARM64-based Systems–CNA
Windows10 for 32-bit Systems–CNA
Windows10 for x64-based Systems–CNA
Windows10 Version 1607 for 32-bit Systems–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0690