CVE-2020-1134
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
Risk Assessment
Risk of gaining administrative control over the system, potentially leading to full system compromise.
Recommendation
Install the security update provided by Microsoft that corrects the memory object handling.
Other vulnerabilities in Windows State Repository Service
See all- CVE-2020-1191High
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.
- CVE-2020-1190High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1189High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1188High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1187High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1186High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1185High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1184High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1144High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1131Medium
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker could run arbitrary code in an elevated context.
Original NVD description (English source)
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows State Repository Service handles objects in memory.