CVE-2020-1114

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2020
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111409.8Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon ComputCVE-2020-111418.1u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer devicCVE-2020-111439.8Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in SnapdCVE-2020-111449.1Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon ACVE-2020-111457.5Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in SnaCVE-2020-111467.8Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon CompCVE-2020-111476.7Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in SnapdragonCVE-2020-111486.7Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggCVE-2020-111496.7Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2020-11157.8<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">WindoCVE-2020-111506.7Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of poinCVE-2020-111516.4Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon A
CVE-2020-1114: High severity, CVSS 7.8 | Vulnix