CVE-2020-0798
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - secure@microsoft.com
- Published
- 2020-03-12
- Last modified
- 2024-08-04
Affected products
- Version 1903 Server Core Installation (Microsoft)
- Version 1909 Server Core Installation (Microsoft)
- Windows (Microsoft)
- Windows 10 (Microsoft)
- Windows 10 Version 1903 For 32-bit Systems (Microsoft)
- Windows 10 Version 1903 For Arm64-based Systems (Microsoft)
- Windows 10 Version 1903 For X64-based Systems (Microsoft)
- Windows 10 Version 1909 For 32-bit Systems (Microsoft)
- Windows 10 Version 1909 For Arm64-based Systems (Microsoft)
- Windows 10 Version 1909 For X64-based Systems (Microsoft)
- Windows Server (Microsoft)
- Windows Server 2016 (Microsoft)
- Windows Server 2019 (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0798
