CVE-2020-1135

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system. The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2020
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-11367.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exCVE-2020-11377.8An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who sCVE-2020-11387.0An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully expCVE-2020-11397.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully eCVE-2020-11407.8An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited thiCVE-2020-11415.5An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowCVE-2020-114147.5An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight exCVE-2020-114154.9An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP serCVE-2020-114165.4JetBrains Space through 2020-04-22 allows stored XSS in Chats.CVE-2020-11427.8An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attCVE-2020-114206.5UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerabiliCVE-2020-11437.0An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An
CVE-2020-1135: High severity, CVSS 7.8 | Vulnix