CVE-2020-0981

Katalog CVE

CVSS 8.8 · High EPSS 1,3%

Kerentanan Incorrect Authorization pada microsoft windows 10, microsoft windows server 2016. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.The update addresses the vulnerability by correcting how Windows handles token relationships, aka 'Windows Token Security Feature Bypass Vulnerability'.

Rincian

Terbit di NVD

15 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0981 patch · advisory vendor
• http://packetstormsecurity.com/files/157248/Microsoft-Windows-NtFilterToken-ParentTokenId-Incorrect-Setting-Pr... advisory pihak ketiga · vdb entry