CVE-2020-1187

HighCVSS 7.8/10Last modified Aug 19, 2026

Description

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows State Repository Service handles objects in memory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < publication
MicrosoftWindows 10 Version 1709>= 10.0.0, < publication
MicrosoftWindows 10 Version 1709 for 32-bit Systems>= 10.0.0, < publication
MicrosoftWindows 10 Version 1803>= 10.0.0, < publication
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < publication
MicrosoftWindows 10 Version 1809>= 10.0.0, < publication
MicrosoftWindows 10 Version 1903 for 32-bit Systems>= 10.0.0, < publication
MicrosoftWindows 10 Version 1903 for ARM64-based Systems>= 10.0.0, < publication
MicrosoftWindows 10 Version 1903 for x64-based Systems>= 10.0.0, < publication
MicrosoftWindows 10 Version 1909>= 10.0.0, < publication
MicrosoftWindows Server 2016>= 10.0.14393.0, < publication
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < publication
MicrosoftWindows Server 2019>= 10.0.17763.0, < publication
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < publication
MicrosoftWindows Server, version 1803 (Server Core Installation)>= 10.0.0, < publication
MicrosoftWindows Server, version 1903 (Server Core installation)>= 10.0.0, < publication
MicrosoftWindows Server, version 1909 (Server Core installation)>= 10.0.0, < publication

References

Timeline

Published
May 21, 2020
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-118727.5The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM kCVE-2020-118739.8An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer overflow in the loggingCVE-2020-118747.5An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. Attackers can bypass Factory Reset Protection (FRCVE-2020-118757.8An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) software. The MTK kernel does not properCVE-2020-118767.5airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-25CVE-2020-118777.5airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC encryption. NOTE: theCVE-2020-118789.8The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts.CVE-2020-118796.5An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (CVE-2020-11887.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker wCVE-2020-118806.5An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or othCVE-2020-118817.5An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to craCVE-2020-118826.1The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. The purpose of this ac