CVE-2020-1590

Katalog CVE

CVSS 6.6 · Medium EPSS 0,84%

Kerentanan pada microsoft windows 10, microsoft windows server 2016 +1 lainnya. Skor CVSS 3.1 6.6 (Medium) menurut microsoft.com.

Deskripsi (NVD)

<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.</p> <p>To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.</p>

Rincian

Terbit di NVD

11 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.6 (Medium), sumber microsoft.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L · uraikan di kalkulator

EPSS (30 hari)

0,84% peluang dieksploitasi; lebih tinggi dari 56,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1590 patch · advisory vendor