May 2020: Windows Remote Access Common Dialog Elevation of Privilege Vulnerability
CVE-2020-1071 Published on May 21, 2020
Windows Remote Access Common Dialog Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.
To exploit this vulnerability an attacker would need to physically access the booted machine to reach the logon screen. An attacker could then exploit the vulnerability and take control of an affected system.
The update addresses the vulnerability by correcting how the Windows handles errors tied to Remote Access Common Dialog.
Products Associated with CVE-2020-1071
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft Windows 10 Version 1507:- Version 10.0.10240.0 and below publication is affected.
- Version 10.0.14393.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.17763.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 6.1.0 and below publication is affected.
- Version 6.1.0 and below publication is affected.
- Version 6.3.0 and below publication is affected.
- Version 6.1.7601.0 and below publication is affected.
- Version 6.1.7601.0 and below publication is affected.
- Version 6.2.9200.0 and below publication is affected.
- Version 6.2.9200.0 and below publication is affected.
- Version 6.3.9600.0 and below publication is affected.
- Version 6.3.9600.0 and below publication is affected.
- Version 10.0.14393.0 and below publication is affected.
- Version 10.0.14393.0 and below publication is affected.
- Version 10.0.17763.0 and below publication is affected.
- Version 10.0.17763.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.