VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 14, 2020· Updated Jun 17, 2026

CVE-2020-1418

CVE-2020-1418

Description

An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1393.

Affected products

37
  • Microsoft/Windows 10 190918 versions
    cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:arm64:*+ 17 more
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x86:*
  • Microsoft/Windows Server 20163 versions
    cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows Diagnostics Execution Servicellm-fuzzy
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 2004 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 2004 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 2004 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: 2019
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windows Server, version 1909 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windows Server, version 2004 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windowsv5
    Range: 10 Version 1803 for 32-bit Systems

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.