CVE-2020-1132

HighCVSS 7.0/10Last modified Aug 19, 2026

Description

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The security update addresses the vulnerability by correcting how Windows Error Reporting manager handles file and folder links.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2020
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-11335.5<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attackeCVE-2020-11347.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker wCVE-2020-11357.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who sucCVE-2020-11367.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exCVE-2020-11377.8An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who sCVE-2020-11387.0An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully expCVE-2020-11397.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully eCVE-2020-11407.8An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited thiCVE-2020-11415.5An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowCVE-2020-114147.5An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight exCVE-2020-114154.9An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP serCVE-2020-114165.4JetBrains Space through 2020-04-22 allows stored XSS in Chats.
CVE-2020-1132: High severity, CVSS 7.0 | Vulnix