CVE-2020-0981HighCVSS 6.3

Windows Token Security Feature Bypass Vulnerability

Published
April 14, 2020
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2020-0981 →

📋 Description

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships. An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape. The update addresses the vulnerability by correcting how Windows handles token relationships

🎯 Affected products8

  • Windows 10 Version 1903 for 32-bit Systems
  • Windows 10 Version 1903 for ARM64-based Systems
  • Windows 10 Version 1903 for x64-based Systems
  • Windows 10 Version 1909 for 32-bit Systems
  • Windows 10 Version 1909 for ARM64-based Systems
  • Windows 10 Version 1909 for x64-based Systems
  • Windows Server, version 1903 (Server Core installation)
  • Windows Server, version 1909 (Server Core installation)

✅ Remediation

KB4549951 (Security Update)

🔗 References (2)