CVE-2020-1385

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-138507.5Artica Pandora FMS 7.44 has inadequate access controls on a web folder.CVE-2020-138518.8Artica Pandora FMS 7.44 allows remote command execution via the events feature.CVE-2020-138527.2Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.CVE-2020-138535.4Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.CVE-2020-138549.8Artica Pandora FMS 7.44 allows privilege escalation.CVE-2020-138557.2Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature.CVE-2020-138567.5An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file thatCVE-2020-138577.5An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticatedCVE-2020-138589.8An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounCVE-2020-138599.8An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LCVE-2020-13865.5An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, akaCVE-2020-138607.5An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system acco
CVE-2020-1385: High severity, CVSS 7.8 | Vulnix