CVE-2020-1375

HIGH EXPLOITED

Windows 10 and Windows Server 2016/2019 - Elevation of Privilege via COM Object Creation

Title source: llm

Exploitation Summary

CVE-2020-1375 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1375

Scores

CVSS v3 7.8

EPSS 0.0721

EPSS Percentile 93.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-05-09

Status published

Products (10)

microsoft/windows_10 1709

microsoft/windows_10 1803

microsoft/windows_10 1809

microsoft/windows_10 1903

microsoft/windows_10 1909

microsoft/windows_10 2004

microsoft/windows_server_2016 1903

microsoft/windows_server_2016 1909

microsoft/windows_server_2016 2004

microsoft/windows_server_2019

Published Jul 14, 2020

Tracked Since Feb 18, 2026