NetSight
high8.8

CVE-2020-1286

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerabi…

Impact

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'.

Affected products

VendorProductAffected versions
MicrosoftWindows 10
Versions 1803, 1809, 1903, 1909, 2004
MicrosoftWindows Server 2016
Versions 1803, 1903, 1909, 2004
MicrosoftWindows Server 2019
All versions

Weakness classification

References