CVE-2020-1071— Microsoft Windows 安全漏洞

Windows Remote Access Common Dialog Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability an attacker would need to physically access the booted machine to reach the logon screen. An attacker could then exploit the vulnerability and take control of an affected system. The update addresses the vulnerability by correcting how the Windows handles errors tied to Remote Access Common Dialog.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A

Microsoft Windows 安全漏洞

Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。 Microsoft Windows中存在提权漏洞，该漏洞源于程序没有正确地处理与远程访问公用对话框相关的错误。攻击者可利用该漏洞提升权限，执行任意代码。以下产品及版本受到影响：Microsoft Windows 10，Windows 10 16

N/A

N/A