high7.8
CVE-2020-1313
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrato…
Impact
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | Versions 1903, 1909, 2004 |
| Microsoft | Windows Server 2016 | Versions 1903, 1909, 2004 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159305/Microsoft-Windows-Update-Orchestrator-Unchecked-ScheduleWork-Call.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1313
- http://packetstormsecurity.com/files/159305/Microsoft-Windows-Update-Orchestrator-Unchecked-ScheduleWork-Call.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1313