Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-0981

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an app

Description

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.The update addresses the vulnerability by correcting how Windows handles token relationships, aka 'Windows Token Security Feature Bypass Vulnerability'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1909 for 32-bit Systems

  • unspecifiedaffected

Microsoft Windows 10 Version 1909 for x64-based Systems

  • unspecifiedaffected

Microsoft Windows 10 Version 1909 for ARM64-based Systems

  • unspecifiedaffected

Microsoft Windows Server, version 1909 (Server Core installation)

  • unspecifiedaffected

Microsoft Windows 10 Version 1903 for 32-bit Systems

  • unspecifiedaffected

Microsoft Windows 10 Version 1903 for x64-based Systems

  • unspecifiedaffected

Microsoft Windows 10 Version 1903 for ARM64-based Systems

  • unspecifiedaffected

Microsoft Windows Server, version 1903 (Server Core installation)

  • unspecifiedaffected

References