CVE-2020-0858

HIGH

Windows - Elevation of Privilege via Public Account Pictures Folder Junction Handling

Title source: llm
STIX 2.1

Description

An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0776.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0091
EPSS Percentile 56.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (16)
microsoft/windows_10
microsoft/windows_10 1607
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
microsoft/windows_8.1
microsoft/windows_rt_8.1
microsoft/windows_server_2012
... and 6 more
Published Mar 12, 2020
Tracked Since Feb 18, 2026