CVE-2020-1571
7.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Summary
An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by ensuring Windows Setup properly handles permissions.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Windows 10 Version 2004 | N/A | affected |
| Microsoft | Windows 10 Version 1803 | N/A | affected |
| Microsoft | Windows 10 Version 1809 | N/A | affected |
| Microsoft | Windows 10 Version 1909 | N/A | affected |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | N/A | affected |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | N/A | affected |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | N/A | affected |
Weaknesses
- Elevation of Privilege
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.