CVE-2020-1071

An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability an attacker would need to physically access the booted machine to reach the logon screen. An attacker could then exploit the vulnerability and take control of an affected system. The update addresses the vulnerability by correcting how the Windows handles errors tied to Remote Access Common Dialog.

• CWE-755

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1071
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1071Patch, Vendor Advisory

Published

May 21, 2020

Last Modified

Aug 19, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10704A flaw was found when using samba as an Active Directory Dom…7.5
• CVE-2020-10705A flaw was discovered in Undertow in versions before Underto…7.5
• CVE-2020-10706A flaw was found in OpenShift Container Platform where OAuth…6.6
• CVE-2020-10707Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10708Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10709A security flaw was found in Ansible Tower when requesting a…7.1
• CVE-2020-10710A flaw was found where the Plaintext Candlepin password is d…4.4
• CVE-2020-10711A NULL pointer dereference flaw was found in the Linux kerne…5.9
• CVE-2020-10712A flaw was found in OpenShift Container Platform version 4.1…8.2
• CVE-2020-10713A flaw was found in grub2, prior to version 2.06. An attacke…8.2
• CVE-2020-10714A flaw was found in WildFly Elytron version 1.11.3.Final and…7.5
• CVE-2020-10715A content spoofing vulnerability was found in the openshift/…4.3