CVE:CVE-2020-0724
CNNVD:CNNVD-202002-554
Microsoft Win32k是美国微软（Microsoft）公司的一个用于Windows多用户管理的系统文件。
Microsoft Win32k组件中存在提权漏洞，该漏洞源于该组件无法正确处理内存中的对象。攻击者可借助特制的应用程序利用该漏洞在内核模式中运行任意代码。以下产品及版本受到影响：Windows 7，Windows 8.1，Windows RT 8.1，Windows 10，Windows Server 2008，Windows Server 2008 R2，Windows Server 2012，Windows Server 2012 R2，Windows Server 2016，Windows Server 2019，Windows 10版本1607，Windows 10版本1709，Windows 10版本1803，Windows 10版本1809，Windows 10版本1903，Windows 10版本1909，Windows Server版本1803，Windows Server版本1903，Windows Server版本1909。
solution:Upgrade microsoft windows_10 to a higher version than -,1607,1709,1803,1809,1903,and avoid the version 1607,1709,1803,1809,1903; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -,1803,1903,1909,and avoid the version 1803,1903,1909; Upgrade microsoft windows_server_2019 to a higher version than -