CVE-2020-1312
First published: Tue Jun 09 2020(Updated: )
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272, CVE-2020-1277, CVE-2020-1302.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windows 10 | =1709 | |
| Windows 10 | =1803 | |
| Windows 10 | =1809 | |
| Windows 10 | =1903 | |
| Windows 10 | =1909 | |
| Windows 10 | =2004 | |
| Microsoft Windows Server 2016 | =1803 | |
| Microsoft Windows Server 2016 | =1903 | |
| Microsoft Windows Server 2016 | =1909 | |
| Microsoft Windows Server 2016 | =2004 | |
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-1312?
CVE-2020-1312 has a severity rating of important according to Microsoft's security guidelines.
How do I fix CVE-2020-1312?
To fix CVE-2020-1312, apply the latest security update provided by Microsoft for your affected version of Windows.
Which versions of Windows are affected by CVE-2020-1312?
CVE-2020-1312 affects multiple versions of Windows 10 and Windows Server 2016 and 2019.
What type of vulnerability is CVE-2020-1312?
CVE-2020-1312 is an elevation of privilege vulnerability in Windows Installer.
What would an attacker need to exploit CVE-2020-1312?
An attacker would require unprivileged execution on the victim system to exploit CVE-2020-1312.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/references
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/windows 10
- version/windows 10/1709
- version/windows 10/1803
- version/windows 10/1809
- version/windows 10/1903
- version/windows 10/1909
- version/windows 10/2004
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1803
- version/microsoft windows server 2016/1903
- version/microsoft windows server 2016/1909
- version/microsoft windows server 2016/2004
- canonical/microsoft windows server 2019