CVE-2020-1131
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker could run arbitrary code in an elevated context.
Risk Assessment
Risk of system compromise by running malicious code with elevated privileges.
Recommendation
Install the update that corrects how Windows State Repository Service handles objects in memory.
Other vulnerabilities in Windows State Repository Service
See all- CVE-2020-1191High
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.
- CVE-2020-1190High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1189High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1188High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1187High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1186High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1185High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1184High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1144High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1134High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
Original NVD description (English source)
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows State Repository Service handles objects in memory.