CVE-2020-1314: High severity windows 10 vulnerability

Published Jun 9, 2020

Updated

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clients, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

Affected Software

22 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows 10=2004

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2016=2004

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1314

Event History

Jun 9, 2020

CVE Published

via MITRE·07:44 PM

Data Sourced

via MITRE·07:44 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1314?

CVE-2020-1314 has a severity rating of 'Important' according to Microsoft.

How do I fix CVE-2020-1314?

To remediate CVE-2020-1314, you need to install the security update provided by Microsoft for your affected Windows version.

Which versions of Windows are affected by CVE-2020-1314?

CVE-2020-1314 affects multiple versions of Windows, including Windows 10, Windows 7 SP1, Windows 8.1, and various Windows Server versions.

Can CVE-2020-1314 be exploited remotely?

CVE-2020-1314 requires local access to exploit, thus it cannot be exploited remotely.

What type of vulnerability is CVE-2020-1314?

CVE-2020-1314 is classified as an elevation of privilege vulnerability within the Windows Text Service Framework.