Vulnerability identifier: #VU27837

Vulnerability risk: Low

CVSSv3.1: 7.2 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C]

CVE-ID: CVE-2020-1048

CWE-ID: CWE-264

Exploitation vector: Local

Exploits in database: 7

• July 3, 2023
  • cve-2020-1048 (spoolsv.exe arb file write poc) [Github]
• September 21, 2020
  • CVE-2020-1048 (An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'.) [Github]
• September 18, 2020
  • Microsoft Spooler Local Privilege Elevation Vulnerability [Metasploit]
• August 21, 2020
  • CVE-2020-1337 (CVE-2020-1048 bypass: binary planting PoC) [Github]
• July 22, 2020
  • CVE-2020-1337-exploit (CVE-2020-1337 Windows Print Spooler Privilege Escalation) [Github]
• July 15, 2020
  • CVE-2020-1048 (POC exploit code for CVE-2020-1048(PrintDemon)) [Github]
• June 3, 2020
  • CVE-2009-0229-PoC (PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR (related to CVE-2020-1048)) [Github]

Impact: Code execution

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft