Vulnerability · Published Sep 11, 2020 · Assigned by microsoft
CVE-2020-1532Windows InstallService Elevation of Privilege Vulnerability
High 7.8
In plain English
A high-severity security flaw in Windows 10 Version 1903 for 32-bit Systems from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Official description
<p>An elevation of privilege vulnerability exists when the Windows InstallService improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p> <p>The security update addresses the vulnerability by correcting how the Windows InstallService handles memory.</p>
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 Version 1909 | 10.0.0 – before publication |
| Microsoft | Windows Server, version 1909 (Server Core installation) | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 – before publication |
| Microsoft | Windows Server, version 1903 (Server Core installation) | 10.0.0 – before publication |
| Microsoft | Windows 10 Version 2004 | 10.0.0 – before publication |
| Microsoft | Windows Server version 2004 | 10.0.0 – before publication |