CVE-2020-1398

6.8 mediumEPSS 1.2%

Medium (6.8) in microsoft. EPSS 1.2% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited the vulnerability could execute commands with elevated permissions.The security update addresses the vulnerability by ensuring that the Ease of Access dialog is handled properly., aka 'Windows Lockscreen Elevation of Privilege Vulnerability'.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
Published: 2020-07-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016
microsoft:windows_server_2019

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1398
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1398

Check your stack JSON