CVE-2020-1195

An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input. An attacker who successfully exploited this vulnerability could write files to arbitrary locations and gain elevated privileges. The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running. The security update addresses the vulnerability by modifying how Microsoft Edge (Chromium-based) Feedback extension validates files.

• CWE-20

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1195
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1195Patch, Vendor Advisory

Published

May 21, 2020

Last Modified

Aug 19, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11943An issue was discovered in Open-AudIT 3.2.2. There is Arbitr…8.8
• CVE-2020-11944Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS …6.1
• CVE-2020-11945An issue was discovered in Squid before 5.0.2. A remote atta…9.8
• CVE-2020-11946Zoho ManageEngine OpManager before 125120 allows an unauthen…7.5
• CVE-2020-11947iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap…3.8
• CVE-2020-11949testserver.cgi of the web service on VIVOTEK Network Cameras…6.5
• CVE-2020-11950VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and…8.8
• CVE-2020-11951An issue was discovered on Rittal PDU-3C002DEC through 5.17.…9.8
• CVE-2020-11952An issue was discovered on Rittal PDU-3C002DEC through 5.17.…6.2
• CVE-2020-11953An issue was discovered on Rittal PDU-3C002DEC through 5.15.…8.8
• CVE-2020-11955An issue was discovered on Rittal PDU-3C002DEC through 5.15.…8.8
• CVE-2020-11956An issue was discovered on Rittal PDU-3C002DEC through 5.17.…9.8