CVE-2020-1084

Katalog CVE

CVSS 5.5 · Medium EPSS 1,1%

Kerentanan Improper Input Validation pada microsoft windows 10, microsoft windows server 2016 +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut microsoft.com.

Deskripsi (NVD)

A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values. An attacker who successfully exploited this vulnerability could deny dependent security feature functionality. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service validates certain function values.

Rincian

Terbit di NVD

21 Mei 2020

Terakhir diubah

19 Agustus 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber microsoft.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1084 patch · advisory vendor
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1084