Rapid7 Vulnerability & Exploit Database

Microsoft Windows: CVE-2020-0678: Windows Error Reporting Manager Elevation of Privilege Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft Windows: CVE-2020-0678: Windows Error Reporting Manager Elevation of Privilege Vulnerability

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
02/11/2020
Created
02/12/2020
Added
02/11/2020
Modified
09/11/2024

Description

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.

Solution(s)

  • microsoft-windows-windows_10-1507-kb4537776
  • microsoft-windows-windows_10-1607-kb4537764
  • microsoft-windows-windows_10-1709-kb4537789
  • microsoft-windows-windows_10-1803-kb4537762
  • microsoft-windows-windows_10-1809-kb4532691
  • microsoft-windows-windows_10-1903-kb4532693
  • microsoft-windows-windows_10-1909-kb4532693
  • microsoft-windows-windows_server_2012-kb4537794
  • microsoft-windows-windows_server_2012_r2-kb4537803
  • microsoft-windows-windows_server_2016-1607-kb4537764
  • microsoft-windows-windows_server_2019-1809-kb4532691
  • msft-kb4532693-a9b1a21b-4d78-4445-a122-0920a6bed52a
  • msft-kb4532693-bb723d9d-43f9-41c3-ac36-25a6146ee6e3
  • msft-kb4537794-568a5fd6-48c6-43f9-9ba0-2623e21003a0
  • msft-kb4537794-8ae8ed3e-0077-405b-8f55-4f7c6a13238c
  • msft-kb4537803-14ae1eab-47ad-4f74-82ee-b2f75e6a258e
  • msft-kb4537803-abdc886d-fd3f-4006-9344-8497d4e85cbd
  • msft-kb4537813-0f1f9882-3aa6-475a-b747-8de1ee20d2c6
  • msft-kb4537813-28d6394a-628c-4b44-8459-3ef74f1060b3
  • msft-kb4537813-99f4c6b4-59e7-494c-a789-7f7520726158
  • msft-kb4537813-a272e1e6-dfa1-4185-a6d1-df6be8d8e8e8
  • msft-kb4537813-da53c71d-c10b-4d52-bc6e-b47bf735d0d9
  • msft-kb4537822-4bdea811-188e-44d5-b156-6edcd91d3d71
  • msft-kb4537822-7eebe13a-a154-4538-be6c-46a00afb5860

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;