TROYANOSYVIRUS
Back to CVEs

CVE-2020-1590

MEDIUM
6.6

Description

<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.</p> <p>To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.</p>

CVE Details

CVSS v3.1 Score6.6
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published9/11/2020
Last Modified2/23/2026
Sourcenvd
Honeypot Sightings0

Affected Products

microsoft:windows_10microsoft:windows_server_2016microsoft:windows_server_2019

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.