CVE-2020-1111

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control over an affected system. The update addresses the vulnerability by correcting how Windows handles calls to Clipboard Service.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2020
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111105.4Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JaCVE-2020-111118.8FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.acCVE-2020-111128.8FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.coCVE-2020-111138.8FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.opCVE-2020-111148.8u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a craftCVE-2020-111157.5u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon CVE-2020-111169.8u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon AutoCVE-2020-111179.8u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulCVE-2020-111187.5u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, SCVE-2020-111197.5Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, CVE-2020-11128.5An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handlesCVE-2020-111207.8u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buff
CVE-2020-1111: High severity, CVSS 7.8 | Vulnix