Not rated
CVE-2020-1241 A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To…
Description
A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system.The update addresses the vulnerability by correcting how Windows Kernel handles parameter sanitization., aka 'Windows Kernel Security Feature Bypass Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows | Versions not published | |
| Windows Server | 2019 | No fix stated |
| Windows Server | 2016 | No fix stated |
| Windows 10 Version 1909 for 32-bit Systems | Versions not published | |
| Windows 10 Version 1909 for x64-based Systems | Versions not published | |
| Windows Server, version 1909 (Server Core installation) | Versions not published | |
| Windows 10 Version 1903 for 32-bit Systems | Versions not published | |
| Windows 10 Version 1903 for x64-based Systems | Versions not published | |
| Windows Server, version 1903 (Server Core installation) | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server, version 2004 (Server Core installation) | Versions not published | |
| Windows 10 Version 2004 for 32-bit Systems | Versions not published | |
| Windows 10 Version 2004 for x64-based Systems | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows
The 829 CVEs of Windows →
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy
7.4
High
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
7.4
High
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
7.0
High
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Medium