CVE-2020-1048

CVE-2020-1048 is an elevation of privilege vulnerability in the Windows Print Spooler service that allows arbitrary file system writes, affecting various versions of Microsoft Windows and Windows Server. With a CVSS score of 7.8 (HIGH), it has a low attack complexity and requires local access, but can lead to full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Metasploit module exists, and the vulnerability has garnered significant community discussion and media coverage, indicating its potential for exploitation.