CVE-2020-1587

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows Ancillary Function Driver for WinSock handles memory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-158706.1Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).CVE-2020-158718.8Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.CVE-2020-158736.5In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_foCVE-2020-158748.8An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary shell commands througCVE-2020-158755.0An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LiCVE-2020-158768.8An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LiCVE-2020-158778.8An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" insteCVE-2020-158788.8An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LiCVE-2020-158797.5Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: aCVE-2020-158816.1A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackeCVE-2020-158828.1A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport dCVE-2020-158836.1A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitr
CVE-2020-1587: High severity, CVSS 7.8 | Vulnix