CVE-2020-1209 - An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'

Back Back to CVE browser

HIGH

An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'

Published Jun 9, 2020

7.8

HIGH

CVSS 3.1

EPSS 3.32%

Description

An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.

Affected products

Vendor Microsoft Product Windows 10 Version 1903 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1903 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1903 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 2004 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 2004 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 2004 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 1903 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 1909 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 2004 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1903 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1903 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1903 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 2004 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 2004 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 2004 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server, version 1903 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server, version 1909 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server, version 2004 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12089
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1209
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12089		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1209		x_refsource_MISCPatchVendor Advisory