CVE-2020-1484: An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the ...

Summary

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The se...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
microsoft	windows_10	1607 1709 1803 1809 1903 1909 2004 `cpe:2.3:o:microsoft:windows_10:-:::::::*`
microsoft	windows_7	All versions `cpe:2.3:o:microsoft:windows_7:-:sp1::::::`
microsoft	windows_8.1	All versions `cpe:2.3:o:microsoft:windows_8.1:-:::::::*`
microsoft	windows_rt_8.1	All versions `cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*`
microsoft	windows_server_2008	r2 `cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*`
microsoft	windows_server_2012	r2 `cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*`
microsoft	windows_server_2016	1903 1909 2004 `cpe:2.3:o:microsoft:windows_server_2016:-:::::::*`
microsoft	windows_server_2019	All versions `cpe:2.3:o:microsoft:windows_server_2019:-:::::::*`

Original advisory text

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the ...

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting how the Windows Work Folders Service handles memory.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1484 Patch Vendor Advisory