CVE-2020-1529

CVE-2020-1529 is an elevation of privilege vulnerability in the Windows Graphics Device Interface (GDI) affecting multiple Windows versions, including Windows 10, 7, 8.1, and various server editions. An attacker could exploit this by logging onto the system and running a specially crafted application, allowing them to execute arbitrary code in kernel mode, leading to full system compromise. This vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. While it has received some community discussion and media coverage, there is no known public exploit code (Metasploit, Nuclei, ExploitDB) and it is not listed in CISA's KEV catalog or currently considered active on the Hot List.