Lucene search

K
cve[email protected]CVE-2020-1381
HistoryJul 14, 2020 - 11:15 p.m.

CVE-2020-1381

2020-07-1423:15:15
CWE-416
web.nvd.nist.gov
56
2
cve-2020-1381
nvd
elevation of privilege
windows graphics component
memory handling

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.849 High

EPSS

Percentile

98.6%

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka ‘Windows Graphics Component Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-1382.

Affected configurations

Vulners
NVD
Node
microsoftwindows_10_2004 for 32-bit systemsMatchunspecified
OR
microsoftwindows_10_2004 for arm64-based systemsMatchunspecified
OR
microsoftwindows_10_2004 for x64-based systemsMatchunspecified
OR
microsoftwindows_server,_version_2004Matchunspecified
OR
microsoftwindows_10_1909 for 32-bit systemsMatchunspecified
OR
microsoftwindows_10_1909 for x64-based systemsMatchunspecified
OR
microsoftwindows_10_1909 for arm64-based systemsMatchunspecified
OR
microsoftwindows_server,_version_1909Matchunspecified
OR
microsoftwindows_10_1903 for 32-bit systemsMatchunspecified
OR
microsoftwindows_10_1903 for x64-based systemsMatchunspecified
OR
microsoftwindows_10_1903 for arm64-based systemsMatchunspecified
OR
microsoftwindows_server,_version_1903Matchunspecified
VendorProductVersionCPE
microsoftwindows_10_2004 for 32-bit systemsunspecifiedcpe:2.3:o:microsoft:windows_10_2004 for 32-bit systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_2004 for arm64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_2004 for arm64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_2004 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_2004 for x64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_server,_version_2004unspecifiedcpe:2.3:o:microsoft:windows_server,_version_2004:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1909 for 32-bit systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1909 for 32-bit systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1909 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1909 for x64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1909 for arm64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1909 for arm64-based systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_server,_version_1909unspecifiedcpe:2.3:o:microsoft:windows_server,_version_1909:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for 32-bit systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for 32-bit systems:unspecified:*:*:*:*:*:*:*
microsoftwindows_10_1903 for x64-based systemsunspecifiedcpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:unspecified:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CNA Affected

[
  {
    "product": "Windows 10 Version 2004 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 2004 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 2004 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows Server, version 2004 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1909 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1909 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1909 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows Server, version 1909 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows Server, version 1903 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

Social References

More

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.849 High

EPSS

Percentile

98.6%