VulnSocial

CVE-2020-13162Disclosure(pulsesecure / pulse_secure_desktop_client)

LOWCVSS 7.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.

pulsesecure CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-367

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • pulse_secure_desktop_client
  • pulse_secure_installer_service

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
pulsesecure
Products
pulse_secure_desktop_clientpulse_secure_installer_service

4 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-11: 1Technical Details · 2026-05-11: 105-11
Signal classification1 categories
Disclosure
1100.0%
Full discourse1 post
  • Giuseppe Calì@_gcali
    Disclosure

    @eeyitemi After watching Orange Tsai’s talk on Pulse Secure, I was inspired to take a look myself. I failed pretty hard on the original target, but I did find a TOCTOU bug in the client that led to local privilege escalation. That became CVE-2020-13162. :-)

    Post summary

    The author reports discovering a TOCTOU bug in the Pulse Secure client that allows local privilege escalation, which they documented as CVE-2020-13162.

    00061319
    324 followersView on X
CPE platform detail32 entries

32 of 32 entries

PartVendorProductVersionTarget SWTarget HW
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client5.3windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.0windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_desktop_client9.1windows-
Apppulsesecurepulse_secure_installer_service8.3windows-
Apppulsesecurepulse_secure_installer_service9.1windows-
Apppulsesecurepulse_secure_installer_service9.1windows-

Explore more

Back to dashboardpulsesecure CVEspulse_secure_desktop_client vulnerabilities