CVE-2020-1579 PUBLISHED CVSS 7.800000190734863 HIGH

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability'.

EPSS 0.40% · 60.5th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.40%
60.5th percentile

Affected Products

VendorProductVersions
MicrosoftWindows 10 Version 1903 for 32-bit Systems10.0.0
MicrosoftWindows Server 201610.0.0
MicrosoftWindows 10 Version 200410.0.0
MicrosoftWindows Server 2012 R26.3.0
MicrosoftWindows Server 2008 Service Pack 26.0.0
MicrosoftWindows 10 Version 180910.0.0
MicrosoftWindows Server version 200410.0.0
microsoftwindows_server_2008r2
MicrosoftWindows Server, version 1909 (Server Core installation)10.0.0
MicrosoftWindows Server 201910.0.0
microsoftwindows_server_20161909, 1903, 2004
MicrosoftWindows Server 2016 (Server Core installation)10.0.0
MicrosoftWindows 10 Version 1903 for x64-based Systems10.0.0
microsoftwindows_7
MicrosoftWindows Server 2008 Service Pack 26.0.0
MicrosoftWindows 8.16.3.0
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)6.0.0
MicrosoftWindows 10 Version 190910.0.0
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)6.0.0
MicrosoftWindows Server 2019 (Server Core installation)10.0.0

…and 18 more

Timeline

References

Open in Interactive Console →