CVE-2020-1191
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.
Risk Assessment
The risk is that an attacker could gain control of the system, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates to mitigate this vulnerability.
Other vulnerabilities in Windows State Repository Service
See all- CVE-2020-1190High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1189High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1188High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1187High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory, allowing an attacker to run arbitrary code in an elevated context.
- CVE-2020-1186High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1185High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1184High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1144High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1134High
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
- CVE-2020-1131Medium
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker could run arbitrary code in an elevated context.
Original NVD description (English source)
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows State Repository Service handles objects in memory.