Description
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1406
Scores
CVSS v3
7.8
EPSS
0.0086
EPSS Percentile
54.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (14)
microsoft/windows_10
(2 CPE variants)
microsoft/windows_10
1607 (2 CPE variants)
microsoft/windows_10
1809 (3 CPE variants)
microsoft/windows_10
1903 (3 CPE variants)
microsoft/windows_10
1909 (3 CPE variants)
microsoft/windows_10
2004 (3 CPE variants)
microsoft/windows_8.1
(2 CPE variants)
microsoft/windows_rt_8.1
microsoft/windows_server_2012
r2
microsoft/windows_server_2016
... and 4 more
Published
Jul 14, 2020
Tracked Since
Feb 18, 2026