Vulnerability · Published May 21, 2020 · Assigned by microsoft
CVE-2020-1082Windows Error Reporting Elevation of Privilege Vulnerability
High 7.8
In plain English
A high-severity security flaw in Windows 10 Version 1507 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Official description
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application. The security update addresses the vulnerability by correcting the way that WER handles and executes files.
Affected products (as reported)
References
- Windows Error Reporting Elevation of Privilege Vulnerability vendor-advisory, patch
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1082 x_refsource_MISC, x_transferred
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1082 x_refsource_MISC, x_transferred