CVE-2020-1048
Windows Print Spooler Elevation of Privilege Vulnerability
HIGH 7.8EPSS 16.4%
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
- Affected
- Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1709 · Windows 10 Version 1709 for 32-bit Systems · Windows 10 Version 1803 · Windows 10 Version 1809
- CVSS v3.1 MICROSOFT
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 16.37% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2020-05-21
- Updated
- 2026-08-19
Proof-of-concept exploits (9)
- http://packetstormsecurity.com/files/159217/Microsoft-Spooler-Local-Privilege-Elevation.h…
- Ken-Abruzzi/CVE-2020-10482★ · 2020-09-21
- ScioShield/sibyl-gpt0★ · 2023-05-25
- Y3A/cve-2020-10480★ · 2023-06-30
- ionescu007/PrintDemon200★ · 2020-05-13
- math1as/CVE-2020-1337-exploit150★ · 2023-12-15
- shubham0d/CVE-2020-104812★ · 2020-06-25
- talsim/printDemon2system1★ · 2025-06-24
- zveriu/CVE-2009-0229-PoC3★ · 2020-05-15
Metasploit modules (1)
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048
- http://packetstormsecurity.com/files/158222/Windows-Print-Spooler-Privilege-Escalation.ht…