CVE-2020-1012

CVE-2020-1012 is an elevation of privilege vulnerability in Wininit.dll affecting various Microsoft Windows and Internet Explorer versions. It allows an unauthenticated attacker to execute code with elevated permissions by tricking a user into visiting a malicious website or opening a specially crafted document. This vulnerability has a high CVSS score of 8.8 due to its network attack vector and high impact on confidentiality, integrity, and availability, though user interaction is required. There is no public exploit code available, it is not listed in CISA's KEV catalog, and community discussion and media coverage are minimal, suggesting it is not actively exploited.