CVE-2020-1314

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows 10 Version 2004 for 32-bit Systems

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。Windows Text Service Framework（TSF）是其中的一个文本服务框架。 Microsoft Windows TSF中存在安全漏洞，该漏洞源于TSF服务器未正确处理从TSF客户端发送的消息。攻击者可借助特制的应用程序利用该漏洞运行任意代码，进而安装程序，查看、更改或删除数据或者创建拥有全部用户权限的新帐户。以下产品及版本受到影响：Microsoft Windows 10，Window

CVE-2020-1314 affects Microsoft Windows 10 Version 2004 for 32-bit Systems. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。Windows Text Service Framework（TSF）是其中的一个文本服务框架。 Microsoft Windows TSF中存在安全漏洞，该漏洞源于TSF服务器未正确处理从TSF客户端发送的消息。攻击者可借助特制的应用程序利用该漏洞运行任意代 CVE-2020-1314 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2020-1314

I. Basic Information for CVE-2020-1314

Affected Products

II. Public POCs for CVE-2020-1314

III. Intelligence Information for CVE-2020-1314

Vendor Advisories for CVE-2020-1314 (1)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1314 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2020-1314

Same Patch Batch · Microsoft · 2020-06-09 · 129 CVEs total

Showing top 20 of 129 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-1314