CVE Vulnerabilities

CVE-2020-1299

Published: Jun 09, 2020 | Modified: Nov 21, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka LNK Remote Code Execution Vulnerability.

Affected Software

NameVendorStart VersionEnd Version
Windows_10Microsoft- (including)- (including)
Windows_10Microsoft1607 (including)1607 (including)
Windows_10Microsoft1709 (including)1709 (including)
Windows_10Microsoft1803 (including)1803 (including)
Windows_10Microsoft1809 (including)1809 (including)
Windows_10Microsoft1903 (including)1903 (including)
Windows_10Microsoft1909 (including)1909 (including)
Windows_10Microsoft2004 (including)2004 (including)
Windows_7Microsoft–sp1 (including)–sp1 (including)
Windows_8.1Microsoft- (including)- (including)
Windows_rt_8.1Microsoft- (including)- (including)
Windows_server_2008Microsoft–sp2 (including)–sp2 (including)
Windows_server_2008Microsoftr2-sp1 (including)r2-sp1 (including)
Windows_server_2012Microsoft- (including)- (including)
Windows_server_2012Microsoftr2 (including)r2 (including)
Windows_server_2016Microsoft- (including)- (including)
Windows_server_2016Microsoft1803 (including)1803 (including)
Windows_server_2016Microsoft1903 (including)1903 (including)
Windows_server_2016Microsoft1909 (including)1909 (including)
Windows_server_2016Microsoft2004 (including)2004 (including)
Windows_server_2019Microsoft- (including)- (including)

References