CVE-2020-1048

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:09

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/158222/Windows-Print-Spooler-Privilege-Escalation.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/158222/Windows-Print-Spooler-Privilege-Escalation.html - Third Party Advisory, VDB Entry
References () http://packetstormsecurity.com/files/159217/Microsoft-Spooler-Local-Privilege-Elevation.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/159217/Microsoft-Spooler-Local-Privilege-Elevation.html - Exploit, Third Party Advisory, VDB Entry
References () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 - Patch, Vendor Advisory () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 - Patch, Vendor Advisory

Information

Published : 2020-05-21 23:15

Updated : 2024-11-21 05:09


NVD link : CVE-2020-1048

Mitre link : CVE-2020-1048

CVE.ORG link : CVE-2020-1048


JSON object : View

Products Affected

microsoft

  • windows_10
  • windows_7
  • windows_8.1
  • windows_rt_8.1
  • windows_server_2016
  • windows_server_2019
  • windows_server_2012
  • windows_server_2008
CWE
CWE-669

Incorrect Resource Transfer Between Spheres