VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 9, 2020· Updated Jun 17, 2026

CVE-2020-1241

CVE-2020-1241

Description

A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system.The update addresses the vulnerability by correcting how Windows Kernel handles parameter sanitization., aka 'Windows Kernel Security Feature Bypass Vulnerability'.

Affected products

25
  • Microsoft/Windows 10 19097 versions
    cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*
  • Microsoft/Windows Server 20165 versions
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows Kernelllm-fuzzy
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 2004 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 2004 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: version 1803 (Core Installation)
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windows Server, version 1909 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windows Server, version 2004 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windowsv5
    Range: 10 Version 1803 for 32-bit Systems

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.