<p>An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses the vulnerability by correcting the way in which the Shell infrastructure component handles objects in memory and preventing unintended elevation from lower integrity application.</p>
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | 2020-09 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4574727)2020-09 Cumulative Update for Microsoft Windows 10, version 1709 (KB4577041)2020-09 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4574727)2020-09 Cumulative Update for Microsoft Windows 10, version 1607 (KB4577015)2020-09 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4570333)2020-09 Cumulative Update for Microsoft Windows 10, version 1903 (KB4574727)2020-09 Cumulative Update for Microsoft Windows 10, version 1809 (KB4570333)2020-09 Cumulative Update for Microsoft Windows 10, version 1803 (KB4577032)2020-09 Cumulative Update for Microsoft Windows 10, version 1909 (KB4574727)2020-09 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4577015) | Sep 8, 2020 | Sep 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub