VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 9, 2021· Updated Jun 17, 2026

CVE-2020-13534

CVE-2020-13534

Description

A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Dreamreport/Dream Report2 versions
    cpe:2.3:a:dreamreport:dream_report:5_r20-2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dreamreport:dream_report:5_r20-2:*:*:*:*:*:*:*
    • (no CPE)range: 5 R20-2
  • Dream Report/Dream Reportdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.