What is the severity of CVE-2020-1291?

CVE-2020-1291 has a severity rating of important, which indicates that it could allow an attacker to elevate privileges on affected systems.

How do I fix CVE-2020-1291?

To fix CVE-2020-1291, you should apply the security updates provided by Microsoft for your affected Windows version.

Which Windows versions are affected by CVE-2020-1291?

CVE-2020-1291 affects multiple versions of Windows, including Windows 7, 8.1, Windows 10 versions 1607 to 2004, and various Windows Server editions.

What type of vulnerability is CVE-2020-1291?

CVE-2020-1291 is classified as an elevation of privilege vulnerability, affecting the Windows Network Connections Service.

Can CVE-2020-1291 be exploited remotely?

CVE-2020-1291 requires local access to exploit, as it involves manipulating objects in memory rather than being triggered remotely.

Vulnerability/
CVE-2020-1291

high

7.8

9/6/2020

4/8/2024

CVE-2020-1291

First published: Tue Jun 09 2020(Updated: )

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'.

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows 10
Microsoft Windows 10	=1607
Microsoft Windows 10	=1709
Microsoft Windows 10	=1803
Microsoft Windows 10	=1809
Microsoft Windows 10	=1903
Microsoft Windows 10	=1909
Microsoft Windows 10	=2004
Microsoft Windows 7	=sp1
Microsoft Windows 8.1
Microsoft Windows RT
Microsoft Windows Server 2008 Itanium	=sp2
Microsoft Windows Server 2008 Itanium	=r2-sp1
Microsoft Windows Server 2008 Itanium	=r2-sp1
Microsoft Windows Server 2012 x64
Microsoft Windows Server 2012 x64	=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016	=1803
Microsoft Windows Server 2016	=1903
Microsoft Windows Server 2016	=1909
Microsoft Windows Server 2016	=2004
Microsoft Windows Server 2019

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1291

Never miss a vulnerability like this again

Reference Links

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1291

Frequently Asked Questions

What is the severity of CVE-2020-1291?
CVE-2020-1291 has a severity rating of important, which indicates that it could allow an attacker to elevate privileges on affected systems.
How do I fix CVE-2020-1291?
To fix CVE-2020-1291, you should apply the security updates provided by Microsoft for your affected Windows version.
Which Windows versions are affected by CVE-2020-1291?
CVE-2020-1291 affects multiple versions of Windows, including Windows 7, 8.1, Windows 10 versions 1607 to 2004, and various Windows Server editions.
What type of vulnerability is CVE-2020-1291?
CVE-2020-1291 is classified as an elevation of privilege vulnerability, affecting the Windows Network Connections Service.
Can CVE-2020-1291 be exploited remotely?
CVE-2020-1291 requires local access to exploit, as it involves manipulating objects in memory rather than being triggered remotely.

agent/type
agent/severity
agent/author
agent/references
agent/remedy
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/first-publish-date
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/microsoft windows 10
version/microsoft windows 10/1607
version/microsoft windows 10/1709
version/microsoft windows 10/1803
version/microsoft windows 10/1809
version/microsoft windows 10/1903
version/microsoft windows 10/1909
version/microsoft windows 10/2004
canonical/microsoft windows 7
version/microsoft windows 7/sp1
canonical/microsoft windows 8.1
canonical/microsoft windows rt
canonical/microsoft windows server 2008 itanium
version/microsoft windows server 2008 itanium/sp2
version/microsoft windows server 2008 itanium/r2-sp1
canonical/microsoft windows server 2012 x64
version/microsoft windows server 2012 x64/r2
canonical/microsoft windows server 2016
version/microsoft windows server 2016/1803
version/microsoft windows server 2016/1903
version/microsoft windows server 2016/1909
version/microsoft windows server 2016/2004
canonical/microsoft windows server 2019

Frequently Asked Questions

What is the severity of CVE-2020-1291?
CVE-2020-1291 has a severity rating of important, which indicates that it could allow an attacker to elevate privileges on affected systems.
How do I fix CVE-2020-1291?
To fix CVE-2020-1291, you should apply the security updates provided by Microsoft for your affected Windows version.
Which Windows versions are affected by CVE-2020-1291?
CVE-2020-1291 affects multiple versions of Windows, including Windows 7, 8.1, Windows 10 versions 1607 to 2004, and various Windows Server editions.
What type of vulnerability is CVE-2020-1291?
CVE-2020-1291 is classified as an elevation of privilege vulnerability, affecting the Windows Network Connections Service.
Can CVE-2020-1291 be exploited remotely?
CVE-2020-1291 requires local access to exploit, as it involves manipulating objects in memory rather than being triggered remotely.

CVE-2020-1291

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2020-1291?

How do I fix CVE-2020-1291?

Which Windows versions are affected by CVE-2020-1291?

What type of vulnerability is CVE-2020-1291?

Can CVE-2020-1291 be exploited remotely?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2020-1291?

How do I fix CVE-2020-1291?

Which Windows versions are affected by CVE-2020-1291?

What type of vulnerability is CVE-2020-1291?

Can CVE-2020-1291 be exploited remotely?