Giriş API Anahtarı Al

Puansız

CVE-2020-1423

Microsoft Windows 10 Version 2004 for x64-based Systems; Microsoft Windows 10 Version 2004 for ARM64-based Systems; Microsoft Windows Server, version 2004 (Ser… Yayım: 2020-07-15 01:54 (6 yıl önce)

Açıklama

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Microsoft	Windows 10 Version 2004 for ARM64-based Systems	unspecified
Microsoft	Windows 10 Version 2004 for x64-based Systems	unspecified
Microsoft	Windows Server, version 2004 (Server Core installation)	unspecified

Kaynaklar ve yamalar

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1423

CVSS puanı

Henüz puanlanmadı. CNA, CISA veya NVD puan verdiğinde burada görünür.

EPSS (30 günde istismar olasılığı)

0.78%

tüm CVE'lerin %56'inden yüksek

Zaman çizelgesi

Numara ayrıldı2019-11-04
Yayımlandı2020-07-15 01:54
IP-DB'ye ulaştı2026-10-25 00:05
Son güncelleme2024-08-04 09:39

Numarayı veren (CNA): microsoft

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Windows 10

7.5Yüksek

CVE-2026-118148 5 saat önce

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

7.8Yüksek

CVE-2026-119382 5 saat önce

Windows TPM Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

5.9Orta

CVE-2026-122474 5 saat önce

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.

7.8Yüksek

CVE-2026-122183 5 saat önce

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

5.5Orta

CVE-2026-122297 5 saat önce

Windows Kernel Transaction Manager Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

7.0Yüksek

CVE-2026-122179 5 saat önce

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.