PT-2020-3822

CVE-2020-1511

·

تاريخ النشر

2020-08-11

·

تاريخ التحديث

2024-01-19

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Connected User Experiences and Telemetry Service (affected versions not specified)
Description: The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which could allow an attacker to run processes in an elevated context. This can be exploited by running a specially crafted application on the victim system. The vulnerability is also associated with errors in handling memory objects, which can lead to privilege escalation.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾