CVE-2020-1429: High severity windows 10 vulnerability

Published Jul 14, 2020

Updated

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.

Affected Software

13 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows 10=2004

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2016=2004

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1429

Event History

Jul 14, 2020

CVE Published

via MITRE·10:54 PM

Data Sourced

via MITRE·10:54 PM

DescriptionWeakness

Frequently Asked Questions

What access does an attacker need to exploit this vulnerability?

Exploitation requires local access and low-level privileges on an affected system; it is not remotely exploitable according to the CVSS vector. No user interaction is required.

What could an attacker achieve after successful exploitation?

Successful exploitation can give the attacker elevated privileges and impact confidentiality, integrity, and availability. The CVSS vector rates all three impacts as high.

What is the recommended remediation?

Apply the available vendor patch to affected Windows 10, Windows Server 2016, and Windows Server 2019 systems. The provided data does not identify an alternative mitigation for systems that cannot yet be patched.

CVE-2020-1429: High severity windows 10 vulnerability

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

What access does an attacker need to exploit this vulnerability?

What could an attacker achieve after successful exploitation?

What is the recommended remediation?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this vulnerability?

What could an attacker achieve after successful exploitation?

What is the recommended remediation?