{"id":"CVE-2020-1071","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-1071","generatedAt":"2026-10-28T06:48:30.981Z","title":"An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog.","description":"An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.\nTo exploit this vulnerability an attacker would need to physically access the booted machine to reach the logon screen. An attacker could then exploit the vulnerability and take control of an affected system.\nThe update addresses the vulnerability by correcting how the Windows handles errors tied to Remote Access Common Dialog.","published":"2020-05-21T23:15:13.000Z","lastModified":"2026-08-19T17:17:13.000Z","status":"Modified","sourceIdentifier":"secure@microsoft.com","cvss":{"version":"3.1","score":6.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-755"],"affected":["microsoft/windows 10","microsoft/windows 7","microsoft/windows 8.1","microsoft/windows rt 8.1","microsoft/windows server 2008","microsoft/windows server 2012","microsoft/windows server 2016","microsoft/windows server 2019"],"epss":{"score":0.01035,"percentile":0.637,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.03%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1071","source":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1071","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-1071","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}