CVE Database
/

CVE-2020-1398

Back to search

CVE-2020-1398

Published: Jul 14, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited the vulnerability could execute commands with elevated permissions.The security update addresses the vulnerability by ensuring that the Ease of Access dialog is handled properly., aka 'Windows Lockscreen Elevation of Privilege Vulnerability'.

VendorProductVersions

Microsoft

Windows 10 Version 2004 for 32-bit Systems

affected
unspecified

Microsoft

Windows 10 Version 2004 for ARM64-based Systems

affected
unspecified

Microsoft

Windows 10 Version 2004 for x64-based Systems

affected
unspecified

Microsoft

Windows Server, version 2004 (Server Core installation)

affected
unspecified

Microsoft

Windows

affected
10 Version 1803 for 32-bit Systems
affected
10 Version 1803 for x64-based Systems
affected
10 Version 1803 for ARM64-based Systems
affected
10 Version 1809 for 32-bit Systems
affected
10 Version 1809 for x64-based Systems

+8 more versions

Microsoft

Windows Server

affected
2019
affected
2019 (Core installation)
affected
2016
affected
2016 (Core installation)

Microsoft

Windows 10 Version 1909 for 32-bit Systems

affected
unspecified

Microsoft

Windows 10 Version 1909 for x64-based Systems

affected
unspecified

Microsoft

Windows 10 Version 1909 for ARM64-based Systems

affected
unspecified

Microsoft

Windows Server, version 1909 (Server Core installation)

affected
unspecified

Microsoft

Windows 10 Version 1903 for 32-bit Systems

affected
unspecified

Microsoft

Windows 10 Version 1903 for x64-based Systems

affected
unspecified

Microsoft

Windows 10 Version 1903 for ARM64-based Systems

affected
unspecified

Microsoft

Windows Server, version 1903 (Server Core installation)

affected
unspecified

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now