CVE-2020-1135
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Elevation of privilege vulnerability in the Windows Graphics Component. An attacker can run a specially crafted application to run processes in an elevated context.
Risk Assessment
Ability to run processes with elevated privileges by a local attacker.
Recommendation
Install the security update that corrects how the Microsoft Graphics Component handles objects in memory and prevents unintended elevation from user mode.
Other vulnerabilities in Windows Graphics Component
See all- CVE-2017-0014High
The Windows Graphics Component in Microsoft Office 2010 SP2 and various versions of Windows allows remote attackers to execute arbitrary code via a crafted website. This is a remote code execution vulnerability that is different from that described in CVE-2017-0108.
- CVE-2024-38250High
A vulnerability in the Windows Graphics Component allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2024-38249High
Vulnerability in Windows Graphics Component allows elevation of privilege. An attacker could exploit it to gain higher privileges.
- CVE-2024-38247High
An elevation of privilege vulnerability in the Windows Graphics Component allows an attacker to gain higher privileges.
- CVE-2023-21822High
An elevation of privilege vulnerability exists in the Windows Graphics Component. The description lacks technical details, but the vulnerability could allow an attacker to gain elevated privileges on the system.
- CVE-2023-21804High
Elevation of privilege vulnerability in Windows Graphics Component. Could be exploited to gain elevated privileges.
- CVE-2022-41052High
Remote Code Execution vulnerability in Windows Graphics Component. Allows an attacker to execute code in the context of the current user.
- CVE-2021-34533High
Remote code execution vulnerability in Windows Graphics Component during font parsing. An attacker could exploit it to execute code.
- CVE-2021-34530High
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit this flaw to execute arbitrary code in the context of the logged-on user.
- CVE-2021-26868High
Elevation of privilege vulnerability in the Windows Graphics Component. Allows an attacker to gain elevated privileges on the system.
Original NVD description (English source)
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system. The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode.