Lucene search

[email protected]CVE-2020-1199

HistoryJun 09, 2020 - 8:15 p.m.

CVE-2020-1199

2020-06-0920:15:13

[email protected]

web.nvd.nist.gov

cve-2020-1199

windows

feedback hub

elevation of privilege

vulnerability

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

JSON

An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka ‘Windows Feedback Hub Elevation of Privilege Vulnerability’.

Affected configurations

Vulners

NVD

Node

microsoftwindows_10_1809 for hololensMatchunspecified

microsoftwindows_10_2004 for x64-based systemsMatchunspecified

microsoftwindows

microsoftwindows_10_1903 for x64-based systemsMatchunspecified

microsoftwindows_10_2004 for hololensMatchunspecified

microsoftwindows_10_1903 for hololensMatchunspecified

VendorProductVersionCPE
microsoftwindows_10_1809 for hololensunspecifiedcpe:2.3:o:microsoft:windows_10_1809 for hololens:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_2004 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_2004 for x64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows_10_1903 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_2004 for hololensunspecifiedcpe:2.3:o:microsoft:windows_10_2004 for hololens:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for hololensunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for hololens:unspecified:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10_1809 for hololens	unspecified	cpe:2.3:o:microsoft:windows_10_1809 for hololens:unspecified:::::::*
microsoft	windows_10_2004 for x64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_2004 for x64-based systems:unspecified:::::::*
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows_10_1903 for x64-based systems	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:unspecified:::::::*
microsoft	windows_10_2004 for hololens	unspecified	cpe:2.3:o:microsoft:windows_10_2004 for hololens:unspecified:::::::*
microsoft	windows_10_1903 for hololens	unspecified	cpe:2.3:o:microsoft:windows_10_1903 for hololens:unspecified:::::::*

CNA Affected

[
  {
    "product": "Windows 10 Version 1809 for HoloLens",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 2004 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "10 Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for x64-based Systems"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 2004 for HoloLens",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for HoloLens",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]