CVE-2020-1511

HIGH

Connected User Experiences and Telemetry Service - Privilege Escala...

Title source: llm
STIX 2.1

Description

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0080
EPSS Percentile 52.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (13)
microsoft/windows_10
microsoft/windows_10 1607
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
microsoft/windows_10 2004
microsoft/windows_server_2016
microsoft/windows_server_2016 1903
... and 3 more
Published Aug 17, 2020
Tracked Since Feb 18, 2026