CVE-2020-1084

MEDIUM

Connected User Experiences and Telemetry Service - DoS

Title source: llm
STIX 2.1

Description

A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values.An attacker who successfully exploited this vulnerability could deny dependent security feature functionality.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service validates certain function values., aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1123.

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0103
EPSS Percentile 59.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (9)
microsoft/windows_10 (2 CPE variants)
microsoft/windows_10 1607 (2 CPE variants)
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
microsoft/windows_server_2016
microsoft/windows_server_2019
Published May 21, 2020
Tracked Since Feb 18, 2026