CVE-2020-0898

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0791.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows	10 Version 1607 for 32-bit Systems; 10 Version 1607 for x64-based Systems
Microsoft	Windows Server	2016; 2016 (Core installation)

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0898Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0898Patch, Vendor Advisory

Timeline

Published: Mar 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-08995.5An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Micros CVE-2020-09005.5An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'V CVE-2020-09019.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An at CVE-2020-09029.8An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation CVE-2020-09035.4A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request CVE-2020-09046.5<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from CVE-2020-09058.0An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution V CVE-2020-09068.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'CVE-2020-09077.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics CVE-2020-09087.5<p>A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully CVE-2020-09097.5A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exp CVE-2020-09108.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us