CVE-2020-0599

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 13, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-06007.8Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilegeCVE-2020-06018.1A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacCVE-2020-06027.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service VulnerabilitCVE-2020-06038.8A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who suCVE-2020-06047.8A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attackeCVE-2020-06058.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who sCVE-2020-06068.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who sCVE-2020-06075.5An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphiCVE-2020-06085.5An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisCVE-2020-06099.8A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to theCVE-2020-06109.8A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to theCVE-2020-06117.5A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De