May 2020: Windows Installer Elevation of Privilege Vulnerability
CVE-2020-1078 Published on May 21, 2020
Windows Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.
To exploit the vulnerability, an attacker would require unprivileged execution on the victim system. After successfully exploiting the vulnerability, an attacker could run arbitrary code with elevated privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The security update addresses the vulnerability by correcting the way Windows Installer handles certain filesystem operations.
Products Associated with CVE-2020-1078
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft Windows 10 Version 1507:- Version 10.0.10240.0 and below publication is affected.
- Version 10.0.14393.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.17763.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 6.1.0 and below publication is affected.
- Version 6.1.0 and below publication is affected.
- Version 6.3.0 and below publication is affected.
- Version 6.1.7601.0 and below publication is affected.
- Version 6.1.7601.0 and below publication is affected.
- Version 6.0.6003.0 and below publication is affected.
- Version 6.0.6003.0 and below publication is affected.
- Version 6.2.9200.0 and below publication is affected.
- Version 6.2.9200.0 and below publication is affected.
- Version 6.3.9600.0 and below publication is affected.
- Version 6.3.9600.0 and below publication is affected.
- Version 10.0.14393.0 and below publication is affected.
- Version 10.0.14393.0 and below publication is affected.
- Version 10.0.17763.0 and below publication is affected.
- Version 10.0.17763.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
- Version 10.0.0 and below publication is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.