CVE-2020-1552

HIGH

Windows Work Folder Service - Privilege Escalation

Title source: llm
STIX 2.1

Description

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows Work Folder Service handles file operations.

References (1)

Core 1
Core References

Scores

CVSS v3 8.0
EPSS 0.0236
EPSS Percentile 82.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

Status published
Products (19)
microsoft/windows_10 (2 CPE variants)
microsoft/windows_10 1607 (2 CPE variants)
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_10 1809
microsoft/windows_10 1903
microsoft/windows_10 1909
microsoft/windows_10 2004
microsoft/windows_7
microsoft/windows_8.1
... and 9 more
Published Aug 17, 2020
Tracked Since Feb 18, 2026