CVE-2020-0707

HIGH

Windows IME - Elevation of Privilege via Memory Handling Issue

Title source: llm

Description

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0707

Scores

CVSS v3 7.8

EPSS 0.0095

EPSS Percentile 57.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published

Products (15)

microsoft/windows_10

microsoft/windows_10 1607

microsoft/windows_10 1709

microsoft/windows_10 1803

microsoft/windows_10 1809

microsoft/windows_10 1903

microsoft/windows_10 1909

microsoft/windows_8.1

microsoft/windows_rt_8.1

microsoft/windows_server_2012

... and 5 more

Published Feb 11, 2020

Tracked Since Feb 18, 2026