PT-2020-3526

CVE-2020-1313

Published

2020-06-09

Updated

2022-04-28

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability that exists when the Windows Update Orchestrator Service improperly handles file operations. This vulnerability can be exploited by an attacker to elevate their privileges and potentially execute arbitrary code using a specially crafted application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Imre Rad

Vendors

Affected products

Weakness enumeration

CWE-269: Improper Privilege Management

Related identifiers

CVE-2020-1313