CVE-2020-1132

HIGH

Windows Error Reporting < - Privilege Escalation

Title source: llm
STIX 2.1

Description

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0082
EPSS Percentile 53.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (12)
microsoft/windows_10
microsoft/windows_10 1607
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
microsoft/windows_server_2016
microsoft/windows_server_2019
microsoft/windows_server_2019 1803
... and 2 more
Published May 21, 2020
Tracked Since Feb 18, 2026