CVE-2020-1418
Description
An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka Windows Diagnostics Hub Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2020-1393.
Risk Information
Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.522
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4558998) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4558998) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server 2019 for x64-based Systems (KB4558998) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4565508) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4565508) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4565489) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4565489) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1903 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server, version 1903 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1903 for x86-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server, version 1909 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server, version 2004 for x64-based Systems (KB4565503) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 2004 for x86-based Systems (KB4565503) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 2004 for x64-based Systems (KB4565503) | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-29238 | 2020-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4558998) (KB4569509) (CVE-2020-1350) |
| PATCH-29239 | 2020-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4558998,KB4569509) (CVE-2020-1350) |
| PATCH-29240 | 2020-07 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4558998,KB4569509) (CVE-2020-1350) |
| PATCH-29246 | 2020-07 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4565508) |
| PATCH-29247 | 2020-07 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4565508) |
| PATCH-29241 | 2020-07 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4565489) |
| PATCH-29242 | 2020-07 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4565489) |
| PATCH-29248 | 2020-07 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29249 | 2020-07 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29250 | 2020-07 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29251 | 2020-07 Cumulative Update for Windows 10 Version 1903 for x86-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29252 | 2020-07 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29253 | 2020-07 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29243 | 2020-07 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4565503,KB4569509) (CVE-2020-1350) |
| PATCH-29244 | 2020-07 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB4565503,KB4569509) (CVE-2020-1350) |
| PATCH-29245 | 2020-07 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4565503,KB4569509) (CVE-2020-1350) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234