Main Vulnerability Database Vulnerabilities #VU24305

Protection Mechanism Failure in Microsoft Windows and Windows Server - CVE-2020-0644

Published: January 14, 2020

Vulnerability identifier: #VU24305

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-0644

CWE-ID: CWE-693

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to Microsoft Windows implements predictable memory section names. An attacker can use this vulnerability along with another issue to bypass implemented security restrictions and elevate privileges on the system.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2020-0644

Install update from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0644

Related Security Bulletins