CVE-2020-1082: Path Traversal
First published: Thu May 21 2020(Updated: )
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021, CVE-2020-1088.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1903 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows Server | =1803 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1903 | |
| Microsoft Windows Server 2016 | =1909 | |
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-1082?
CVE-2020-1082 has a severity rating of important according to Microsoft.
How do I fix CVE-2020-1082?
To fix CVE-2020-1082, install the latest security updates provided by Microsoft for affected Windows versions.
What systems are affected by CVE-2020-1082?
CVE-2020-1082 affects various versions of Microsoft Windows 10 and Windows Server, including specific versions like 1607, 1709, and 1909.
What does CVE-2020-1082 do?
CVE-2020-1082 allows an attacker to gain elevated privileges on a system by exploiting the Windows Error Reporting functionality.
Is there a workaround for CVE-2020-1082?
Currently, Microsoft has not provided an official workaround for CVE-2020-1082, and it is advisable to apply the necessary updates instead.
- agent/references
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/weakness
- agent/author
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/event
- agent/source
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1903
- version/microsoft windows 10/1909
- canonical/microsoft windows server
- version/microsoft windows server/1803
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1903
- version/microsoft windows server 2016/1909
- canonical/microsoft windows server 2019