Not rated
CVE-2020-0981 A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who…
Description
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.The update addresses the vulnerability by correcting how Windows handles token relationships, aka 'Windows Token Security Feature Bypass Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 10 Version 1909 for 32-bit Systems | Versions not published | |
| Windows 10 Version 1909 for x64-based Systems | Versions not published | |
| Windows 10 Version 1909 for ARM64-based Systems | Versions not published | |
| Windows Server, version 1909 (Server Core installation) | Versions not published | |
| Windows 10 Version 1903 for 32-bit Systems | Versions not published | |
| Windows 10 Version 1903 for x64-based Systems | Versions not published | |
| Windows 10 Version 1903 for ARM64-based Systems | Versions not published | |
| Windows Server, version 1903 (Server Core installation) | Versions not published |
Other CVEs of Windows 10 Version 1909 for 32-bit Systems
The 503 CVEs of Windows 10 Version 1909 for 32-bit Systems →
CVE-2020-1457
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory,…
Not rated
CVE-2020-1425
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in…
Not rated
CVE-2020-1468
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its…
Not rated
CVE-2020-1463
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka…
Not rated