CVE-2020-1471

No fix known EPSS 1%CVSS 7.3

<p>An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.</p> <p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted script or application.</p> <p>The security update addresses the vulnerability by checking COM objects.</p>

Published 2020-09-11 · CVE record · OSV

Products: Microsoft Windows 10 Version 1803, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 1709 for 32-bit Systems, Microsoft Windows 10 Version 1709, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows 10 Version 2004, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016